Re: Blocking p2p traffic

[David Curry <david.curry () NEWSCHOOL EDU>]

I did promise a summary once the responses died down, so here it is. The
following solutions were mentioned:

   - Add more bandwidth instead of trying to block
   - Procera
   - NetEqualizer
   - Exinda
   - TippingPoint IPS
   - SourceFire IPS
   - Fortinet
   - Cisco SCE

Exinda was mentioned by two people; all the others were mentioned by one
person each. Everybody seems to be generally happy with their solutions;
Procera and NetEqualizer received perhaps somewhat more enthusiastic
"likes" than the others, but that's my subjective reaction.

Thanks to all who responded.


--Dave


--

*DAVID A. CURRY, CISSP* • DIRECTOR OF INFORMATION SECURITY

*THE NEW SCHOOL* • 55 W. 13TH STREET • NEW YORK, NY 10011

+1 212 229-5300 x4728 • david.curry () newschool edu



On Thu, May 2, 2013 at 4:31 PM, David Curry <david.curry () newschool edu>wrote:

> We currently have an aging Packeteer whose sole remaining purpose in life
> is to "shape" peer-to-peer file sharing traffic (BitTorrent and friends)
> down to zero, thus keeping us from receiving DMCA takedown requests. It's
> worked well at this for several years, but now we're starting to max it out
> as far as licensed bandwidth goes, and we're not inclined to spend more
> money on such an old device.
>
> So... we're in the market for something new, and thought we'd ask what
> other schools are using. From a bit of research it looks like Procera and
> Exinda are still in that space; A10 has a product on their website still,
> but it doesn't look like there's much focus on it anymore (maybe we're
> wrong). Juniper SRX firewalls (which we own) have some capabilities in this
> space via their AppID stuff; we'd be interested in hearing from anyone
> using them for that purpose. And yes, we know that Palo Alto firewalls can
> do it -- but we don't have Palo Altos and have no plans to purchase them
> anytime soon, so that's not really an option for us.
>
> If you're using something OTHER THAN a Palo Alto firewall to
> block/limit/reduce peer-to-peer traffic:
>
>    - What product are you using?
>    - What are you doing with peer-to-peer (blocking, limiting, etc.)
>    - How well is it working?
>    - Do you like it?
>
> After responses taper off, I'll summarize back to the list.
>
> Thanks,
> --Dave
>
>
>
> --
>
> *DAVID A. CURRY, CISSP* • DIRECTOR OF INFORMATION SECURITY
>
> *THE NEW SCHOOL* • 55 W. 13TH STREET • NEW YORK, NY 10011
>
> +1 212 229-5300 x4728 • david.curry () newschool edu