Filtering P2P programs by IPS sensor

[mohammed_moustafa]

Hi,

I tried to stop P2P programs by enabling all signatures of P2P. some programs were stopped like Kaza but may other programs like lime-wire and others were still working. I tried to modify the signatures to add ports of regex to it but I couldn't find any information about this programs. can any one help me with that issue.

Thanks.

[Farrukh Haroon · Accepted solution]

You could get some help from the regex built-in the ASA firewall and try to add them in IPS. Also looking at the signature definitions of the open source snort IPS might also help.

show run all regex (for the ASA)

Regards

Farrukh