Re: MobileMe

[Tremaine Lea <tremaine () gmail com>]

On Wed, 2008-09-17 at 10:14 -0700, Krzyston, Randy wrote:
> Anyone found a good way to block the use of Apple's MobileMe ???


If just using a firewall, I'd recommend blocking outbound TCP on 80 and
443 to www.me.com, me.com, mac.com, www.mac.com and auth.me.com

Breaking access to auth.me.com is the key here, as it will prevent them
from authenticating.

If you have a content filter capable of handling ssl, I'd create a
blocked webmail category and adding those domains to it with a useful
block message to point users to company policy about why they are not
permitted access.

For this to be reasonably successful, it also depends on you having good
egress filtering in place to prevent someone from simply ssh'ing to a
system outside and launching a browser that way, or using a proxy of
some kind.

Good luck.

-- 
Tremaine Lea
Network Security Consultant
Intrepid ACL
"Paranoia for hire"