Re: blocking p2p traffic

[Jeff Kell <jeff-kell () utc edu>]

InfoSec wrote:
> Still surprised that no one has mentioned that Cisco users can use NBAR
> (network based application recognition).  It works really well for us
> and takes un-needed stress out of the IDS, yet requires very little of
> the router to drop/block the p2p from getting anywhere.

Unless you have a 6500, which doesn't allow you to combine NBAR with 
policing or rate-limiting :-(

Jeff


---------------------------------------------------------------------------
Free 30-day trial: firewall with virus/spam protection, URL filtering, VPN,
wireless security

Protect your network against hackers, viruses, spam and other risks with Astaro
Security Linux, the comprehensive security solution that combines six
applications in one software solution for ease of use and lower total cost of
ownership.

Download your free trial at 
http://www.securityfocus.com/sponsor/Astaro_focus-ids_040301
---------------------------------------------------------------------------