Using ASA for P2P filtering

[s_colombo]

Hi ,

I've a question more related to design in here .

I was looking for a solution to actively monitor the use of P2P programs and block them .

The problem , I think , is quite well-known but I'd like to have some opinion about the effectiveness of ASA appliances on blocking such programs.

I'm also interested in solution able to analyze web traffic to block "proxy" based P2P programs, I mean the ability of some P2P to encapsulte traffic in http .

Thanks

[Leo_Stobbe]

Hi,

Perhaps you can do it with AIP-SSM.

Leo

[s_colombo]

Hi Leo ,

can you give me a little more information ?

What is exactly AIP-SSM , is it a module for ASA ?

Thanks

[jim]

Yes its a IPS module for the ASA. This gives you, not only a IDS sensor, but also a way to drop inline packets as Leo stated earlier.

[srue]

I don't know about the IPS module for ASA, but the IPS appliance supports signatures for BitTorrent, eDonkey, and Kazaa. (i believe they use the same signature set though).

It also includes signatures for yahoo, msn, aol, and a couple other IM apps.

[cmcbride]

You could also investigate Web filtering products which will have these features. Websense Enterprise, or Websense Express for example.