Firewall Wizards mailing list archives
Re: Edge appliance (firewall) that filters/monitors/records instant messenger?
From: "K K" <kkadow () gmail com>
Date: Mon, 8 Dec 2008 15:37:34 -0600
On Fri, Dec 5, 2008 at 8:07 PM, Victor Williams <bwilliam13 () windstream net> wrote:
I am looking at different technologies to address the constant and ever-changing instant messenger issue. At this point, I'm looking at two options really...block everything at the firewall except incoming VPN connections, and use a proxy server for any required outgoing internet access,
Even with a proxy, savvy users will be able to bypass all but the most intrusive IM controls. Short of doing MITM on every SSL session or locking down all devices on the network, the problem of IM may be better solved through HR than IT. Properly configured, a Sidewinder firewall can make it very difficult for users to tunnel out to Internet IM (by validating the protocol for on both TCP/22 and TCP/443 or any other CONNECT destination), but not impossible.
and use an internal IM/conferencing service like Office Communications Server 2007 that can hook to public IM networks if needed...
OCS seems to be the preferred solution to this problem, at least for Microsoft-centric shops. Yes, it can be a pain to set up, and MS wants a per-seat license for federation with other IM networks, but it does work.
Overall question, does anyone know of any other options that would allow me to manage this traffic and be able to provide to management transcripts of what is typed, and to whom?
Look into Blue Coat and Symantec's "IMlogic" Kevin _______________________________________________ firewall-wizards mailing list firewall-wizards () listserv icsalabs com https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
Current thread:
- Edge appliance (firewall) that filters/monitors/records instant messenger? Victor Williams (Dec 08)
- Re: Edge appliance (firewall) that filters/monitors/recordsinstant messenger? Darden, Patrick S. (Dec 09)
- Re: Edge appliance (firewall) that filters/monitors/records instant messenger? K K (Dec 09)
- Re: Edge appliance (firewall) that filters/monitors/records instant messenger? Paul D. Robertson (Dec 09)
- Re: Edge appliance (firewall) that filters/monitors/records instant messenger? ArkanoiD (Dec 10)
- Re: Edge appliance (firewall) that filters/monitors/records instant messenger? Victor Williams (Dec 11)
- Re: Edge appliance (firewall) that filters/monitors/records instant messenger? Jim Seymour (Dec 11)