with ironport (wsa) block skype

[muhammednikhilmm]

Hi ,

with cisco ironport (wsa) how to block skype ?

[Lee Valentin]

Under Custom Policy Elements, you can create a custom url category called, 'BlockSkype' and add the custom category to your Global Access Policy for URL filtering and set it to Block.

Perhaps you can block it on your firewall. Skype uses random UDP ports outbound and reverts to using 443/80 if it doesn't find any available UDP ports. It becomes a bit of a task.

If you have an ASA, you can try to use a regex and MPF to block.

Good luck and please post your final fix.

[muhammednikhilmm]

I have integrated my iron port with AD and i want to block the skype for individual users. if my understanding is correct from the ASA it will block for globally. for all the users. 

is there any solution in iron port for this? 

[Lee Valentin]

Create an access policy and under Policy Member Definition > Selected Groups & Users you can add users or groups you want to add to this policy.

Next, under Advanced you can select what you want to block

Make sure this policy is towards the top of the list.

As stated previously, this will only block access to Skype website. If the application is already installed, you may not be able to block because the application uses random UDP ports and will default only to 443/80 in the event the other ports are not available.

You need an application aware firewall or an IPS appliance like the IPS for ASA, FirePower Services for ASA or a FirePower Appliance (Sourcefire)

The below link describes in more detail

http://www.cisco.com/c/en/us/support/docs/security/web-security-appliance/118094-congifure-wsa-00.html

[alessandro.s]

Hi Muhammed,

you can try this :

https://supportforums.cisco.com/discussion/11662391/ironport-skype-blocking

Hope it helps.

Regards,

[alexdelangel]

Hello muhammed,

Were you able to block skype? Would you share the procedure with me? Or would anybody share the procedure with me?

Regards!