Suppose if you want to filter streaming media content with PIX 506E, you have two options. The first one is to block ports on the PIX and the second is to use Proxy Server to filter URLs. Since our main concern is doing it on the PIX, You may enter these commands on the PIX for well-known ports that you could block on the firewall:
access-list nostream deny udp any any eq 2979
access-list nostream deny udp any any eq 1790
access-list nostream deny udp any any eq 1755
access-list nostream deny udp any any eq 1736
access-list nostream deny udp any any eq 554
access-list nostream deny udp any any eq 537
access-list nostream deny tcp any any eq 2979
access-list nostream deny tcp any any eq 1790
access-list nostream deny tcp any any eq 1755
access-list nostream deny tcp any any eq 1736
access-list nostream deny tcp any any eq 554
access-list nostream deny tcp any any eq 537
access-list nostream permit tcp any any eq 80
access-list nostream permit ip any any
access-group nostream in interface inside
However, some streaming applications use random ports using auto-configure options that are difficult to block with the PIX. To resolve this issue, you have the second option, using a proxy server to filter the URLs. You may use Websense and any other software to filter web traffic.
