Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
New Member

Blocking

I need help on how to block msn and yahoo messenger

2 REPLIES
New Member

Re: Blocking

Blocking steps for IM: http://tinyurl.com/y98q8fr

How to block Instant Messaging (IM) traffic im chat blocking

IM traffic over HTTP can be blocked today in the following ways:

  • Block by defining custom user agents used by the IM applications.
  • Block with the “Chat” predefined URL category, or with a custom category containing IM servers.
  • Block ports that IM applications use to tunnel through proxies with the HTTP CONNECT method.
  • Manually add IM servers into the L4 Traffic Monitor black list to block access to popular IM destinations irrespective of the port.

MSN Messenger

Within Access Policies click on objects

Specify the following under Block Custom MIME Types:
application/x-msn-messenger

Yahoo Instant Messenger

Create a custom category in Web Security Manager -> Custom URL Categories

Specify the following under Sites:

pager.yahoo.com, shttp.msg.yahoo.com, update.messenger.yahoo.com, update.pager.yahoo.com

Set this custom category to Block.

AOL Instant Messenger

Create a custom category in Web Security Manager -> Custom URL Categories

Specify the following under Sites:

login.oscar.aol.com, login.messaging.aol.com, 64.12.161.153, 64.12.161.185, 64.12.200.89, kdc.gkdc.uas.aol.com, 205.188.0.0/16

Set this custom category to Block.

Google Chat

Create a custom category in Web Security Manager -> Custom URL Categories

Specify the following under Advanced: Regular Expressions:

mail\.google\.com/mail/channel

Set this custom category to Block.

Google Chat (Alternate method)

Create a custom category in Web Security Manager -> Custom URL Categories

Specify the following under Sites:

.chatenabled.mail.google.com, chatenabled.mail.google.com, 216.239.37.125, 72.14.253.125, 72.14.217.189, 209.85.137.125

Set this custom category to Block.

New Member

Re: Blocking

Currently, the chat function within the gmail.com page is served by https://66.102.7.189:443.  Ironport categorizes this IP as "Search Engines and Portals."  I am about to receive an S-160 to eval, so I cannot test it myself.  But do you guys actually have this blocked?

286
Views
0
Helpful
2
Replies
CreatePlease to create content