How to block Skype 5.1 on PIX and ASA?

[c.valenti]

Hi all,

I need help to block skype 5.1 in my network. This version of skype doesn't need Administrator rights to be installed.

In my network there are 2 ways to Internet, one filtered by a PIX 525 ver 6.3(3) and the other by a ASA 5510 ver 8.3(2).

No IPS system present on my network.

Can anyone help me?

Is there any regex to block this versione of skype?

Thanks in advance!!

[mkdccie]

Hi Valenti,

Skype using many ports and IPs, best thing is to run wireshark and capture some traffic while registering to skype, then match this traffic and block it.

Regards,

MKDCCIE

[c.valenti]

Thank you Mohammed but is this the only way?

I read about block skype traffic throught class map like this:

class-map match-any peer2peer

description "Peer-to-peer stuff"

match protocol gnutella

match protocol edonkey

match protocol fasttrack

match protocol napster

match protocol kazaa2

match protocol skype

match protocol bittorrent

But I'm not sure that it works for latest version of Skype.

[mkdccie]

No, this way will not work.

In fact blocking skype on router will be much better, but looks you dont have this option.

Plz rate if this helpful.

Regards,

MKDCCIE

[c.valenti]

Please can you help about block it on router?

Thanks

[mkdccie]

Yes sure, best sample is this link:

http://www.ccie1.com/?p=377

Plz rate if this helpful.

Regards,

MKDCCIE

[c.valenti]

I can not configure the router because this is in charge at provider. So I need a solution on Firewall.