One other thing that I forgot to mention is that when you create objects such as
.msn.com and .hotmail.com and .login.passport.com, you have to create them
as "domain" objects.
cisco4ng
Stig Bull <stig.bull AT HUGINGROUP DOT COM> wrote:
Dear list, I have been given the task of blocking MSN Messenger in the
office firewall.
However, after some rather extensive Googling, I see that this is far
more difficult than it appears to be, and the web sites I found with
claimed solutions for blocking MSN, simply didn't work.
Here's what I've done so far (after Googling):
Blocked access to gateway.messenger.hotmail.com, messenger.hotmail.com
and webmessenger.msn.com; all traffic, inbound and outbound. I've also
blocked port 1863 (TCP, UDP), 6891-6900 (TCP), 5190 (UDP) and 6901
(UDP).
Still people are able to connect MSN Messenger with no problem at all. I
suspect this is because the server's I'm trying to block, have several
different IP addresses.
I've read that some think the best way is SmartDefense, but I'm not sure
if I need a license for it. At least it tells me when I try to update it
(NG AI R55 by the way) that SmartDefense updates require a SmartDefense
subscription license, so I really haven't looked into it at all.
Is there any successfull way of blocking MSN Messenger which really
works?
--
Regards
Stig Bull
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
---------------------------------
Yahoo! Photos
Got holiday prints? See all the ways to get quality prints in your hands ASAP.
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
