Want to block P2P application using ASA5540

[aamir_8]

I want to block P2P application & IM using ASA with IPS built-in. I dont wanna use the ACL for all the ports because most of the P2P application using dynamic ports.

[nagel]

I think that if you don't want to use ACLs then you are going to need a 3rd party appliance such as the Packeteer. I would like at this option even if you can block without ACL. I know my life has been made considerably easier since the introduction of the Packeteer Appliance.

[ggilbert]

Aamir,

You can do this using the application layer inspection on the firewall.

Please take a look at the configuration guide given below.

http://www.cisco.com/univercd/cc/td/doc/product/multisec/asa_sw/v_7_2/conf_gd/firewall/inspect.htm#wp1479354

Rate this post, if it helps.

Cheers

Gilbert