Blocking Windows Media & Spyware

[Alistair-Roberts]

Hi,

We have a 1720 with Pix & VPN.

I'd like to be able to configure an access list to deny users from using Windows Media (online radio stations etc), as I've found this is increasing ISP costs.

Also is there a way to block Spy-ware, e.g Gator, 180Solutions etc.

Thanks

Alistair

[r-lemaster]

For Windows Media, deny TCP/UDP 1755 in/out. You might also remove "netshow" from your CBAC config or PIX fixup. Your clients will still be able to stream over 80 because software engineers enjoy running stuff over 80 because they know how much it pisses us off.

I don't know how to block spyware with a router/fw/vpn, but I think you can catch some spyware with NIDS.

Mucho Gusto.