topic How to Block BitTorrent , Download-Manager through ASA in Network Security https://community.cisco.com/t5/network-security/how-to-block-bittorrent-download-manager-through-asa/m-p/1953448#M456733 <P>Hello Gus,</P><P></P><P>We have many clients who are misusing our company bandwidth by downloading files through BitTorrent and Download-Managers. i tried alot to block it but no luck.</P><P></P><P>Can anyone intruct me on how to block them on ASA device ?</P> Mon, 11 Mar 2019 23:36:38 GMT Imran Ahmad 2019-03-11T23:36:38Z How to Block BitTorrent , Download-Manager through ASA https://community.cisco.com/t5/network-security/how-to-block-bittorrent-download-manager-through-asa/m-p/1953448#M456733 <P>Hello Gus,</P><P></P><P>We have many clients who are misusing our company bandwidth by downloading files through BitTorrent and Download-Managers. i tried alot to block it but no luck.</P><P></P><P>Can anyone intruct me on how to block them on ASA device ?</P> Mon, 11 Mar 2019 23:36:38 GMT https://community.cisco.com/t5/network-security/how-to-block-bittorrent-download-manager-through-asa/m-p/1953448#M456733 Imran Ahmad 2019-03-11T23:36:38Z How to Block BitTorrent , Download-Manager through ASA https://community.cisco.com/t5/network-security/how-to-block-bittorrent-download-manager-through-asa/m-p/1953449#M456735 <HTML><HEAD></HEAD><BODY><P>You don't block them in the ASA. </P><P></P><P>You can use AD to block applications like BitTorrent and DM from running.</P></BODY></HTML> Tue, 31 Jul 2012 23:20:58 GMT https://community.cisco.com/t5/network-security/how-to-block-bittorrent-download-manager-through-asa/m-p/1953449#M456735 Leo Laohoo 2012-07-31T23:20:58Z How to Block BitTorrent , Download-Manager through ASA https://community.cisco.com/t5/network-security/how-to-block-bittorrent-download-manager-through-asa/m-p/1953450#M456737 <HTML><HEAD></HEAD><BODY><P>hi </P><P></P><P>you can block bit torrent</P><P></P><P><A class="jive-link-external-small" href="http://wiki.wireshark.org/BitTorrent">http://wiki.wireshark.org/BitTorrent</A><SPAN> ---&gt; you can use this guide for the tcp ports.</SPAN></P><P></P><P>Ports range for Bit torrent </P><P></P><P>Bittorrent uses TCP to transfer files and UDP for searching.&nbsp; It will&nbsp; use port 80 if the default TCP ports 6881-6889,6969 and 8080 can not be&nbsp; reached. Some bittorrent clients also support HTTP downloading.To&nbsp; completely block BT, please block UDP port 1024-65534 in your router.</P><P></P><P>then make acl based on that and apply it</P><P></P><P>do rate if helpful.</P><P></P><P>Nitesh</P></BODY></HTML> Wed, 01 Aug 2012 09:05:43 GMT https://community.cisco.com/t5/network-security/how-to-block-bittorrent-download-manager-through-asa/m-p/1953450#M456737 saxenanitesh8522 2012-08-01T09:05:43Z How to Block BitTorrent , Download-Manager through ASA https://community.cisco.com/t5/network-security/how-to-block-bittorrent-download-manager-through-asa/m-p/1953451#M456740 <HTML><HEAD></HEAD><BODY><P>It is not working.</P><P></P><P>isn't there any other ways to block it through ASA ?&nbsp;&nbsp;&nbsp; i dont have AD</P></BODY></HTML> Thu, 02 Aug 2012 07:03:19 GMT https://community.cisco.com/t5/network-security/how-to-block-bittorrent-download-manager-through-asa/m-p/1953451#M456740 Imran Ahmad 2012-08-02T07:03:19Z How to Block BitTorrent , Download-Manager through ASA https://community.cisco.com/t5/network-security/how-to-block-bittorrent-download-manager-through-asa/m-p/1953452#M456742 <HTML><HEAD></HEAD><BODY><P>hi Iram,</P><P></P><P></P><DIV><CODE>regex bit-torrent-tracker ".*[Ii][Nn][Ff][Oo]_[Hh][Aa][Ss][Hh]=.*"</CODE><P><CODE> </CODE> </P><P><CODE>object-group service BitTorrent-Tracker tcp</CODE></P><P><CODE> </CODE><CODE>description TCP Ports used by Bit Torrent for tracker communication</CODE></P><P><CODE> </CODE><CODE>port-object eq 2710</CODE></P><P><CODE> </CODE><CODE>port-object eq 6969</CODE></P><P><CODE>object-group service Blocked-UDP-Ports udp</CODE></P><P><CODE> </CODE><CODE>description All ports blocked for Bit Torrent UDP DHT (all ephemeral ports except VPN encapsulation)</CODE></P><P><CODE> </CODE><CODE>port-object range 10001 65535</CODE></P><P><CODE> </CODE><CODE>port-object range 1024 9999</CODE></P><P><CODE> </CODE> </P><P><CODE>class-map type inspect http match-all bit-torrent-tracker</CODE></P><P><CODE> </CODE><CODE>description Bit Torrent Tracker communication</CODE></P><P><CODE> </CODE><CODE>match request args regex bit-torrent-tracker</CODE></P><P><CODE> </CODE><CODE>match request method get</CODE></P><P><CODE> </CODE> </P><P><CODE>policy-map type inspect http Drop-P2P</CODE></P><P><CODE> </CODE><CODE>description Drop protocol violations, Kazaa, gator and Bit Torrent Tracker traffic</CODE></P><P><CODE> </CODE><CODE>parameters</CODE></P><P><CODE>&nbsp; </CODE><CODE>protocol-violation action log</CODE></P><P><CODE> </CODE><CODE>class _default_gator</CODE></P><P><CODE>&nbsp; </CODE><CODE>drop-connection log</CODE></P><P><CODE> </CODE><CODE>class _default_kazaa</CODE></P><P><CODE>&nbsp; </CODE><CODE>drop-connection log</CODE></P><P><CODE> </CODE><CODE>class bit-torrent-tracker</CODE></P><P><CODE>&nbsp; </CODE><CODE>drop-connection log</CODE></P><P><CODE> </CODE> </P><P><CODE>policy-map global_policy</CODE></P><P><CODE> </CODE><CODE>class inspection_default</CODE></P><P><CODE>&nbsp; </CODE><CODE>inspect http Drop-P2P</CODE></P></DIV><P></P><P>Thanks,</P><P></P><P>Nitesh </P><P></P><P>Please rate if helpful</P></BODY></HTML> Thu, 02 Aug 2012 07:29:02 GMT https://community.cisco.com/t5/network-security/how-to-block-bittorrent-download-manager-through-asa/m-p/1953452#M456742 saxenanitesh8522 2012-08-02T07:29:02Z How to Block BitTorrent , Download-Manager through ASA https://community.cisco.com/t5/network-security/how-to-block-bittorrent-download-manager-through-asa/m-p/1953453#M456743 <HTML><HEAD></HEAD><BODY><P> it is not working</P></BODY></HTML> Thu, 02 Aug 2012 08:31:26 GMT https://community.cisco.com/t5/network-security/how-to-block-bittorrent-download-manager-through-asa/m-p/1953453#M456743 Imran Ahmad 2012-08-02T08:31:26Z Re: How to Block BitTorrent , Download-Manager through ASA https://community.cisco.com/t5/network-security/how-to-block-bittorrent-download-manager-through-asa/m-p/1953454#M456744 <HTML><HEAD></HEAD><BODY><P>did you apply the policy map or not??</P><P></P><P>or just copy pasted the configuration on top??</P></BODY></HTML> Thu, 02 Aug 2012 08:40:43 GMT https://community.cisco.com/t5/network-security/how-to-block-bittorrent-download-manager-through-asa/m-p/1953454#M456744 saxenanitesh8522 2012-08-02T08:40:43Z Re: How to Block BitTorrent , Download-Manager through ASA https://community.cisco.com/t5/network-security/how-to-block-bittorrent-download-manager-through-asa/m-p/1953455#M456745 <HTML><HEAD></HEAD><BODY><P>object-group service Blocked-UDP-Ports udp</P><P> description All ports blocked for Bit Torrent UDP DHT (all ephemeral ports except VPN encapsulation)</P><P> port-object range 10001 65535</P><P> port-object range 1024 9999</P><P></P><P></P><P>object-group service BitTorrent-Tracker tcp</P><P> description TCP Ports used by Bit Torrent for tracker communication</P><P> port-object eq 2710</P><P> port-object range 6881 6999</P><P></P><P>access-list inside_access_in extended deny udp any any object-group Blocked-UDP-Ports log warnings inactive</P><P>access-list inside_access_in extended deny tcp any any object-group BitTorrent-Tracker log warnings inactive</P><P>access-list inside_access_in extended permit tcp any any</P><P></P><P><SPAN style="text-decoration: underline;"><STRONG>Apply the access list</STRONG><STRONG> in the inside interface</STRONG><STRONG> it might need modifications depending on your configuration and its just a sample configuration</STRONG></SPAN></P><P></P><P> regex bit-torrent-tracker ".*[Ii][Nn][Ff][Oo]_[Hh][Aa][Ss][Hh]=.*"</P><P></P><P>class-map type inspect http match-all bit-torrent-tracker</P><P> description Bit Torrent Tracker communication</P><P> match request args regex bit-torrent-tracker</P><P> match request method get</P><P></P><P>policy-map type inspect http Drop-P2P</P><P> description Drop protocol violations Bit Torrent Tracker traffic</P><P> parameters</P><P>&nbsp; protocol-violation action log</P><P> class bit-torrent-tracker</P><P>&nbsp; drop-connection log</P><P></P><P>policy-map global_policy</P><P> class inspection_default</P><P>&nbsp; inspect http Drop-P2P</P></BODY></HTML> Thu, 02 Aug 2012 08:52:03 GMT https://community.cisco.com/t5/network-security/how-to-block-bittorrent-download-manager-through-asa/m-p/1953455#M456745 saxenanitesh8522 2012-08-02T08:52:03Z