Re: blocking p2p traffic

["Jens Matthes" <jens () rockefeller edu>]

We are using Packethound
(http://www.palisadesys.com/products/packethound/index.shtml) with very good
success to block P2P and other undesired network traffic. It can recognize
hundreds of application protocols and is very flexible what policies you
want to enforce and how (block, log, throttle ...)

Definitely worth a look.

Jens Matthes
Network Security Specialist
Information Technology
The Rockefeller University
New York, NY

E-mail: jens () mail rockefeller edu


----- Original Message ----- 
From: "InfoSec" <InfoSec () Williams com>
To: <focus-ids () securityfocus com>
Sent: Monday, March 08, 2004 5:14 PM
Subject: RE: blocking p2p traffic


Still surprised that no one has mentioned that Cisco users can use NBAR
(network based application recognition).  It works really well for us
and takes un-needed stress out of the IDS, yet requires very little of
the router to drop/block the p2p from getting anywhere.

just a thought...google it! :)




> ----- Original Message -----

> From: "Deshpande, Yashodhan" <ydeshpande () ipolicynet com>

> To: <focus-ids () securityfocus com>

> Sent: Wednesday, March 03, 2004 6:24 PM

> Subject: blocking p2p traffic

>

>

> > Hi,

> >

> >     Any information regarding IDS/IPS software available which blocks
p2p

> traffic? Or in general any information regarding how to identify p2p

> application is running and may be configure firewall to block such
traffic.

> In general it is observed that such applications do not work on =
single

> port and do port hopping. How to block them?

> >

> > Any inputs on the same would be appreciated.

> >

> >

> > Thanks,

> >

> > Yashodhan

> >

> >
------------------------------------------------------------------------
--

> -

> > Free 30-day trial: firewall with virus/spam protection, URL
filtering,

> VPN,

> > wireless security

> >

> > Protect your network against hackers, viruses, spam and other risks
with

> Astaro

> > Security Linux, the comprehensive security solution that combines six

> > applications in one software solution for ease of use and lower total
cost

> of

> > ownership.

> >

> > Download your free trial at

> > http://www.securityfocus.com/sponsor/Astaro_focus-ids_040301

> >
------------------------------------------------------------------------
--

> -

> >

>

>

> -----------------------------------------------------------------------
----

> Free 30-day trial: firewall with virus/spam protection, URL filtering,
VPN,

> wireless security

>

> Protect your network against hackers, viruses, spam and other risks
with Astaro

> Security Linux, the comprehensive security solution that combines six

> applications in one software solution for ease of use and lower total
cost of

> ownership.

>

> Download your free trial at

> http://www.securityfocus.com/sponsor/Astaro_focus-ids_040301

> -----------------------------------------------------------------------
----

>

>


------------------------------------------------------------------------
---
Free 30-day trial: firewall with virus/spam protection, URL filtering,
VPN,
wireless security

Protect your network against hackers, viruses, spam and other risks with
Astaro
Security Linux, the comprehensive security solution that combines six
applications in one software solution for ease of use and lower total
cost of
ownership.

Download your free trial at
http://www.securityfocus.com/sponsor/Astaro_focus-ids_040301
------------------------------------------------------------------------
---


---------------------------------------------------------------------------
Free 30-day trial: firewall with virus/spam protection, URL filtering, VPN,
wireless security

Protect your network against hackers, viruses, spam and other risks with
Astaro
Security Linux, the comprehensive security solution that combines six
applications in one software solution for ease of use and lower total cost
of
ownership.

Download your free trial at
http://www.securityfocus.com/sponsor/Astaro_focus-ids_040301
---------------------------------------------------------------------------



---------------------------------------------------------------------------
Free 30-day trial: firewall with virus/spam protection, URL filtering, VPN,
wireless security

Protect your network against hackers, viruses, spam and other risks with Astaro
Security Linux, the comprehensive security solution that combines six
applications in one software solution for ease of use and lower total cost of
ownership.

Download your free trial at 
http://www.securityfocus.com/sponsor/Astaro_focus-ids_040301
---------------------------------------------------------------------------