Hi,
The only way that the ASA/PIX/FWSM firewall can block something, is based on PORT, IP and PROTOCOL, as result FIXUP/INSPECTION and ACL are the features we can add or modify in order to accomplish this, but if we are talking about block VIDEO/AUDIO from a WEB BASED environment, this could not be possible, because their IP addresses are always changing, plus not all
this websites uses RTSP, so we cannot block all of them based on Firewall architecture/capabilities.
To an extent, blocking RTSP traffic will block many sites available today. But we have many other protocols like VDOlive, NetShow, Xing, RTP,RTSCP, etc which use different tcp/udp ports.
Also, we can take a packet sniffer is check for the ports on which these protocols are communication with users and block the ports.
If you wish to do a packet sniffer, then you can also use IPS sensor/module, and create customer signatures on your sensor for identifying the streaming audio/video you want blocked.
Hope this helps. Please reply back if you need any further assistance.
Regards,
Chirag
P.S.: Please mark this thread as answered if you feel your query is answered. Do rate helpful posts.
