Re: Do you block P2P ?

[Jeff Kell <jeff-kell () UTC EDU>]

Stanclift, Michael wrote:
> We're doing a similar method. We've been blocking it at a protocol level for quite a while, but this semester we also 
> started utilizing Cisco NAC/Clean Access to scan and deny access to systems with some of the more popular file 
> sharing applications installed. It has brought a few complaints but they fall on deaf ears.

We have considered that option, but there is somewhat of a fine line
between the right to deny the use of an application on our network
versus simply having one installed.  If we continue to pursue our NAC
(Campus Manager) and get to the point where we can identify a
"university-owned computer" then I have no problem with forcing their
removal up-front.

The only installations we actively chase down are those generating tens
of thousands of connections a day (orders of magnitude greater than a
typical user), and that is easily justified given the infrastructure
load (firewalls, logging, netflow, etc) that activity produces.

Jeff