I know. I would done the same for me (or my company). But this is a request from a customer and i am not sure if ASA even supports this. Funny: you can easy block IM (yahoo or MS) but you can't block torrents which consumes a lot (or all of) bandwith.

Thanx ,)

Gregor

If you want something to block torrents,

get a checkpoint firewall. SmartDefense

is integrated into Checkpoint firewall that

can help you to do just that.

CCIE Security

Or get an IPS module for your 5520. There are specific signatures to BT that can do exactly what you want. The problem with trying to block BT is that it can pretty much use any port.

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/ps6825/product_data_sheet0900aecd80404916_ps6120_Products_Data_Sheet.html

this is what i was referring to. There are two different models compatible with the 5520.

one is around $4000 USD, the other around 7k.

"The problem with trying to block BT is that it can pretty much use any port."

That's what IPS supposed to do, be able to

detect these things. If Cisco IPS module on

ASA 5520 can not do that, then the IPS is

completely useless. SmartDefense in CP can

take care of this. If you don't want

to use Checkpoint, you can go with sourcefire

that can accomplish the same thing.

CCIE security

Yeah. i asked just that....