How to block File sharing (Kazaa) using Pix

[NAVIN PARWAL]

Folks,

reading about Pix 7.0 features, and it says that it does deep inspection and can control things like file transfer using Kazaa, etc.

Would someone know how? i am running 6.3.

Thanks

[#2]

FastTrack is the most popular P2P network around today. P2P file sharing applications such as Kazaa, KazaaLite, Grokster and iMesh all use this network and connect to other hosts using any open TCP/UDP port to search and download files. This makes filtering them with an access list impossible.

Note: These applications cannot be filtered with a PIX firewall.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a00801e419a.shtml#c4

[pwicks]

Version 7 will indeed allow the Pix to block Kazaa. If you are running a 515 or above, you can upgrade to version 7. If you are running a 506, you can scroll through the web to find "alternative" ways of setting up version 7 the 506, but it is not supported by Cisco. I know of one person running version 7 on the 506e and is quite happy with the tunnelling application control, but he is a good command-line programmer (the GUI is not available when loaded on the 506). If you have the 501, you are totally out of luck. Version 6.x just does not do the job without help from an Cisco IDS device.