topic Re: Blocking torrent on ASA in Network Security

Blocking torrent on ASA

gtrampus — Mon, 11 Mar 2019 11:59:07 GMT

Hi,

I have an ASA5520 with 8.0 software. Is there anyway to block torrents?

thanx,

Gregor

Re: Blocking torrent on ASA

1cmerchant — Tue, 05 Feb 2008 14:20:16 GMT

The way I block all unwanted traffic is to specify (via ACL permits) the traffic that I want to allow, and thus everything else is blocked. Of course this is all linked to your corporate security policy, etc.

Not sure if that would work for your environment, but it has worked well for me. The only real downside is that when someone wants (needs) to connect to things that aren't specifically permitted you have to go in and modify the ACL as required.

Re: Blocking torrent on ASA

gtrampus — Tue, 05 Feb 2008 14:31:45 GMT

I know. I would done the same for me (or my company). But this is a request from a customer and i am not sure if ASA even supports this. Funny: you can easy block IM (yahoo or MS) but you can't block torrents which consumes a lot (or all of) bandwith.

Thanx ,)

Gregor

Re: Blocking torrent on ASA

cisco24x7 — Tue, 05 Feb 2008 15:08:03 GMT

If you want something to block torrents,

get a checkpoint firewall. SmartDefense

is integrated into Checkpoint firewall that

can help you to do just that.

CCIE Security

Re: Blocking torrent on ASA

srue — Tue, 05 Feb 2008 15:42:58 GMT

Or get an IPS module for your 5520. There are specific signatures to BT that can do exactly what you want. The problem with trying to block BT is that it can pretty much use any port.

Re: Blocking torrent on ASA

srue — Tue, 05 Feb 2008 16:23:21 GMT

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/ps6825/product_data_sheet0900aecd80404916_ps6120_Products_Data_Sheet.html

this is what i was referring to. There are two different models compatible with the 5520.

one is around $4000 USD, the other around 7k.

Re: Blocking torrent on ASA

cisco24x7 — Tue, 05 Feb 2008 19:03:45 GMT

"The problem with trying to block BT is that it can pretty much use any port."

That's what IPS supposed to do, be able to

detect these things. If Cisco IPS module on

ASA 5520 can not do that, then the IPS is

completely useless. SmartDefense in CP can

take care of this. If you don't want

to use Checkpoint, you can go with sourcefire

that can accomplish the same thing.

CCIE security

Re: Blocking torrent on ASA

gtrampus — Tue, 05 Feb 2008 20:09:01 GMT

Yeah. i asked just that....