How to block Tor-Browser, Skype..

[Imran Ahmad]

Hello,

Unauthorized usages of misilinious applications like (Skype, Tor_Browsers.....) , is killing me.  I have tried alot to find a way to block these applications , but never i succeeded.

Can any one guide me how to block such things on Cisco ASA & ISRs  please ??

Another question, i dont know why Cisco has not enabled UDP Ports Inspection on its products, this lack of UDP-inspection makes alot of troubles to IT people

Thanks for any guid-lines

[david-swope]

What model ASA do you have? You will require a NGFW with CX to achieve what you want.

Within either PRSM or managing the CX directly off the ASA. Create a new access policy, you will select source and destination then in the "Application/Service" section, this is where you select the application, in this case "BitTorrent" and "Skype"

Policy Action being Deny

Save Policy

At least it should be similar to the above, the CX "module" is far from being a power house NGFW offering. *sigh*

[nawir]

My way to block tor is this

http://nbctcp.wordpress.com/2014/10/20/blocking-tor-browser-in-cisco-asa-5505/