Re: Blocking we browsing completely and allowing only Skype out to the Internet

["Ian Mahuron" <mahuron () gmail com>]

Skype is fairly aggressive when it's looking for open outbound ports
(i.e. not limited to using 80 and 443).  I'd lock the firewall down
and use a packet trace to determine its search sequence.

I suspect you could also use URI inspection.  Both FW-1 and PIX/ASA
support this.  You could also use a proxy.  This may help work around
HTTPS.

On 10/23/07, Siju George <sgeorge.ml () gmail com> wrote:
> Hi,
>
> Is anybody doing Something like this on any of their firewalls?
>
> i.e blocking all web browsing and at the same time allowing only skype
> to the outside world?
>
> Could you please let me know how you do that?
>
> Thank you so much
>
> Kind Regards
>
> Siju
> _______________________________________________
> firewall-wizards mailing list
> firewall-wizards () listserv icsalabs com
> https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
_______________________________________________
firewall-wizards mailing list
firewall-wizards () listserv icsalabs com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards