topic Re: Using ASA for P2P filtering in Network Security

Using ASA for P2P filtering

s_colombo — Mon, 11 Mar 2019 12:01:01 GMT

Hi ,

I've a question more related to design in here .

I was looking for a solution to actively monitor the use of P2P programs and block them .

The problem , I think , is quite well-known but I'd like to have some opinion about the effectiveness of ASA appliances on blocking such programs.

I'm also interested in solution able to analyze web traffic to block "proxy" based P2P programs, I mean the ability of some P2P to encapsulte traffic in http .

Thanks

Re: Using ASA for P2P filtering

Leo_Stobbe — Sun, 10 Feb 2008 10:32:12 GMT

Hi,

Perhaps you can do it with AIP-SSM.

Leo

Re: Using ASA for P2P filtering

s_colombo — Mon, 11 Feb 2008 07:24:34 GMT

Hi Leo ,

can you give me a little more information ?

What is exactly AIP-SSM , is it a module for ASA ?

Thanks

Re: Using ASA for P2P filtering

jim — Mon, 11 Feb 2008 17:51:39 GMT

Yes its a IPS module for the ASA. This gives you, not only a IDS sensor, but also a way to drop inline packets as Leo stated earlier.

Re: Using ASA for P2P filtering

srue — Mon, 11 Feb 2008 18:12:45 GMT

I don't know about the IPS module for ASA, but the IPS appliance supports signatures for BitTorrent, eDonkey, and Kazaa. (i believe they use the same signature set though).

It also includes signatures for yahoo, msn, aol, and a couple other IM apps.

Re: Using ASA for P2P filtering

cmcbride — Mon, 11 Feb 2008 22:15:04 GMT

You could also investigate Web filtering products which will have these features. Websense Enterprise, or Websense Express for example.