topic Re: PIX|Web Sense and chat programs in Wireless https://community.cisco.com/t5/wireless/pix-web-sense-and-chat-programs/m-p/28119#M223071 <HTML><HEAD></HEAD><BODY><P>You will have some definite hurdles to surmount with http based programs as there are few if any known solutions out there for this. Blocking known ports for software such as ICQ poses no larger problem than shutting down telnet or something similar. </P></BODY></HTML> Fri, 14 Jun 2002 13:07:34 GMT mmellet 2002-06-14T13:07:34Z PIX|Web Sense and chat programs https://community.cisco.com/t5/wireless/pix-web-sense-and-chat-programs/m-p/28118#M223070 <P>Hello Cisco people</P><P></P><P>We are using Web Sense to block most of the Sites that we feel necessary but have had problems with programs like AOL, MSN, ICQ chat programs. So I am going to stop this at the PIX and was wonder who out there had blocked Chat programs in the enterprise, and methods used.</P><P>I fully understand the steps needed to block what is needed on the PIX but was wanting to hear horror storied or problems you might have encountered. I would also like to know what sites (address\protocols) you had to block to stop these programs because some are http based. (AIM, MSN,ect).</P><P>For those of you who have applied rules to the inside interface of the pix, did you notice any performance issues or any other problem related to having all outbound traffic filtered?</P><P></P><P></P><P></P><P>Thank you</P><P></P><P></P><P>Thanks</P><P>Rob Mears III, CCNP, MCSE, CNE, NNCDS, NNCSS, NNCPS, MCP+I, A+</P><P>Technical Mercenary</P><P>Valor Telecom.com</P><P></P> Mon, 05 Jul 2021 06:13:36 GMT https://community.cisco.com/t5/wireless/pix-web-sense-and-chat-programs/m-p/28118#M223070 rmears 2021-07-05T06:13:36Z Re: PIX|Web Sense and chat programs https://community.cisco.com/t5/wireless/pix-web-sense-and-chat-programs/m-p/28119#M223071 <HTML><HEAD></HEAD><BODY><P>You will have some definite hurdles to surmount with http based programs as there are few if any known solutions out there for this. Blocking known ports for software such as ICQ poses no larger problem than shutting down telnet or something similar. </P></BODY></HTML> Fri, 14 Jun 2002 13:07:34 GMT https://community.cisco.com/t5/wireless/pix-web-sense-and-chat-programs/m-p/28119#M223071 mmellet 2002-06-14T13:07:34Z Re: PIX|Web Sense and chat programs https://community.cisco.com/t5/wireless/pix-web-sense-and-chat-programs/m-p/28120#M223072 <HTML><HEAD></HEAD><BODY><P>Try Packetshaper or NetEnforcer. They are bandwidth managing tools that identify various applications and then you may apply a variety of policies. For instance, you may limit the bandwidth per session, per application or block the application all together. It is neat and fairly inexpensive. Not that difficult to use and great customer support.</P><P></P><P></P></BODY></HTML> Mon, 05 Aug 2002 21:04:02 GMT https://community.cisco.com/t5/wireless/pix-web-sense-and-chat-programs/m-p/28120#M223072 areese 2002-08-05T21:04:02Z Re: PIX|Web Sense and chat programs https://community.cisco.com/t5/wireless/pix-web-sense-and-chat-programs/m-p/28121#M223073 <HTML><HEAD></HEAD><BODY><P>You can use IPS to filter those http based chat programs. Too bad that you are still using pix firewall.</P><P></P><P>If you are using ASA, you can buy AIP-SSM module which has IPS/IDS function.</P><P></P><P>HTH.</P><P></P><P>Regards</P><P>Joe</P></BODY></HTML> Tue, 18 Dec 2007 03:48:45 GMT https://community.cisco.com/t5/wireless/pix-web-sense-and-chat-programs/m-p/28121#M223073 kyawzawhtut 2007-12-18T03:48:45Z