topic Zone Based Firewall in Network Security https://community.cisco.com/t5/network-security/zone-based-firewall/m-p/1307957#M826322 <P>I have a site-to-site vpn with two 2811 Cisco Routers with 2 interfaces each </P><P>(LAN and WAN) and a GRE Tunnel.</P><P>I want to implement Zone Based Firewall and I have read several configurations to block P2P and Instant messaging, but each of them is for a specific applications, and I'd like to know if there is a way to block all of them or I have to block each individual protocol. </P><P></P><P>Best regards</P> Mon, 11 Mar 2019 16:18:15 GMT usuario0001 2019-03-11T16:18:15Z Zone Based Firewall https://community.cisco.com/t5/network-security/zone-based-firewall/m-p/1307957#M826322 <P>I have a site-to-site vpn with two 2811 Cisco Routers with 2 interfaces each </P><P>(LAN and WAN) and a GRE Tunnel.</P><P>I want to implement Zone Based Firewall and I have read several configurations to block P2P and Instant messaging, but each of them is for a specific applications, and I'd like to know if there is a way to block all of them or I have to block each individual protocol. </P><P></P><P>Best regards</P> Mon, 11 Mar 2019 16:18:15 GMT https://community.cisco.com/t5/network-security/zone-based-firewall/m-p/1307957#M826322 usuario0001 2019-03-11T16:18:15Z Re: Zone Based Firewall https://community.cisco.com/t5/network-security/zone-based-firewall/m-p/1307958#M826327 <HTML><HEAD></HEAD><BODY><P>It would be a good idea to block P2P using NBAR. You can block IM using ZBF. </P><P></P><P>Some p2p like kazaa is a little tricky to block using ZBF.</P><P></P><P>Here is a link to block p2p using NBAR.</P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/products/ps5855/products_configuration_example09186a0080ac3082.shtml" target="_blank">http://www.cisco.com/en/US/products/ps5855/products_configuration_example09186a0080ac3082.shtml</A></P></BODY></HTML> Tue, 22 Sep 2009 19:56:47 GMT https://community.cisco.com/t5/network-security/zone-based-firewall/m-p/1307958#M826327 Kureli Sankar 2009-09-22T19:56:47Z