Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

peer-to-peer file-sharing

What is the best way to block "peer-to-peer file-sharing" on a PIX??

  • Other Security Subjects
2 REPLIES
Cisco Employee

Re: peer-to-peer file-sharing

You have to apply ACL's to block the traffic, trouble is figuring out what the traffic patterns are. Generally you would apply this ACL inbound on your inside interface, then put a "permit ip any any" at the end of it to allow everything else through.

Here's a good link for blocking most peer-to-peer apps, create your ACL's from this information:

http://testweb.oofle.com/filesharing/

Silver

Re: peer-to-peer file-sharing

It's important to remember that this will block the "well-known" ports of those apps. A lot of the P2Ps apps will allow the user to define another port for use.

-Shannon

229
Views
0
Helpful
2
Replies