How do I stop instant messenger clients with an ASA?

[anowell]

I need to stop my internal users from using AOL, MSN and Yahoo instant messenger clients. I understand it can be done using QOS but I have not been able to get it working correctly. I see how I can stop MSN and Yahoo by using the “service” option but how do I stop AOL? Also, I need to stop IMs even if the user changes the port, any ideas?

My ASA is running 7.2(2) and I am willing to upgrade if needed.

Thanks in advance!

[plumbis]

You should be able to do this with the MPF and application level inspection maps. Check out this link for more information and some pretty good guidelines.

<http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/inspect.html#wp1479354>