cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Welcome to Cisco Firewalls Community


562
Views
0
Helpful
1
Replies
Highlighted

¿How do I block ARES with ASA 5505 base license?

Well, I tried using the cisco configuration for ASA 5505 for blocking P2P:

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00808c38a6.shtml

but this configuration only is usefull with programs like Kazaa, so I try this configuration to block ARES but the problem is that ARES try to make downloads from different ports, ¿How do I block ARES if there are sereveral ports ?, otherwise this si my configuration, thanks, Any help is useful for me

1 REPLY 1
Cisco Employee

¿How do I block ARES with ASA 5505 base license?

Since Ares uses many different IPs and does not always tunnels traffic via HTTP but rather uses other ports, it is very difficult to block it. You need to find a pattern on how it works and then there it may be a possibility depending on the behavior, but it is a result of sitting down, take captures etc....

My advice, if everyone is abusing of it, throttle all that traffic using QoS or Limit the access to outbound ports.

Mike.

Mike