Dynamic proxy blocking through IPS
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-18-2013 04:06 PM - edited 03-10-2019 05:54 AM
Hi,
Can we block dynamic proxies and skype through IPS?
BR.
Haider
- Labels:
-
IPS and IDS
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-18-2013 11:28 PM
You can block everything as long as payload is not encrypted. Generally, if you want to block smth and don't know what to match in your signature rules, just use any kind of packet caputre, look at that capture file using wireshark or smth like that. Find some unique fields/patterns. Then write signature (based on regex, for example) matching that pattern. I personnaly did that for team-viewer, skype and some other things.
