03-22-2014 06:04 AM
Hi ,
with cisco ironport (wsa) how to block skype ?
03-24-2014 08:18 AM
Under Custom Policy Elements, you can create a custom url category called, 'BlockSkype' and add the custom category to your Global Access Policy for URL filtering and set it to Block.
Perhaps you can block it on your firewall. Skype uses random UDP ports outbound and reverts to using 443/80 if it doesn't find any available UDP ports. It becomes a bit of a task.
If you have an ASA, you can try to use a regex and MPF to block.
Good luck and please post your final fix.
07-03-2015 04:05 AM
I have integrated my iron port with AD and i want to block the skype for individual users. if my understanding is correct from the ASA it will block for globally. for all the users.
is there any solution in iron port for this?
07-03-2015 05:50 AM
Create an access policy and under Policy Member Definition > Selected Groups & Users you can add users or groups you want to add to this policy.
Next, under Advanced you can select what you want to block
Make sure this policy is towards the top of the list.
As stated previously, this will only block access to Skype website. If the application is already installed, you may not be able to block because the application uses random UDP ports and will default only to 443/80 in the event the other ports are not available.
You need an application aware firewall or an IPS appliance like the IPS for ASA, FirePower Services for ASA or a FirePower Appliance (Sourcefire)
The below link describes in more detail
08-06-2015 09:04 AM
Hi Muhammed,
you can try this :
https://supportforums.cisco.com/discussion/11662391/ironport-skype-blocking
Hope it helps.
Regards,
09-23-2014 10:18 AM
Hello muhammed,
Were you able to block skype? Would you share the procedure with me? Or would anybody share the procedure with me?
Regards!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide