11-13-2006 01:44 PM - edited 03-11-2019 01:56 AM
Hello,
I'm looking into disabling streaming audio/video on our PIX firewalls. Does anyone have any information on this? I found a cisco white paper on the internet for disabling P2P software which was very helpful, but would like to disable the streaming media. I've read a little about RTSP and RTP. Is it as simple as blocking those ports?
Thanks,
Also, I am new to this forum and hope to post more in the future. Just looking through some of the posts its nice to see everyone willing to help each other out, and not replying with a cocky attitude that I have seen in some other tech forums.
11-17-2006 12:44 PM
Need to block blow ports using access-list:
for streaming audio : port no are 18888 ; 6970 (Real)
for streaming video: port no 7000 (VDOlive); 7170 (Real); 1558 (XING-UDP)
for real time streaming protocol it is port no 554 (UDP-RTSP )
for MS NET show: port no 1755 (both UDP and TCP)
For example:
access-list media deny tcp any any eq 18888
access-list media deny udp any any eq 18888
access-list media deny udp any any eq 6970
access-list media deny tcp any any eq 7000
access-list media deny udp any any eq 7170
access-list media deny udp any any eq 1558
access-list media deny udp any any eq 554
access-list media deny tcp any any eq 1755
11-19-2006 05:47 PM
Here is a url
http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a00801e419a.shtml
Watch the word wrap
Also take a look at content services by Trend Micro that work with the PIX
Bill Harrison
Cisco Instructor
11-20-2006 08:34 AM
Thank you both for your replies. I will follow your instructions
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide