Sort of. As long as you restrict outbound connections to authorized servers and do not allow
Source: any_internal Destination: any Service: any
it will work. AI works primarily on port 80 traffic, which usually has to be open for most companies. A forthcoming version will allow P2P blocking regardless of the port. I think IM was included, but am not positive.
Ray
From: X Xpid <[EMAIL PROTECTED]> Reply-To: Mailing list for discussion of Firewall-1 <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: Re: [FW-1] how to block MSN, AOL, Yahoo messenger with R54 or R55 Date: Tue, 11 May 2004 19:32:52 -0400
Why are we still talking about blocking applications such as MSN,AOL and Yahoo messenger based on tcp ports? Weren't r55 and future ones able to block based on Application Intelligence?
The MSN under R54 should work... Unless it's a brand new client with differing ports?
All versions seem to use different IP ranges but blocking access to these IP's should work.
Allow: 65.54.244.42 - Hotmail (if u like) Block: 65.52.0.0 - 65.55.255.255 Block: 207.68.0.0 / 255.255.0.0 Block: 207.46.0.0 / 255.255.0.0
BR
Rob
______________________________________________________________________ Post your free ad now! http://personals.yahoo.ca
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
_________________________________________________________________ Stop worrying about overloading your inbox - get MSN Hotmail Extra Storage! http://join.msn.com/?pgmarket=en-us&page=hotmail/es2&ST=1/go/onm00200362ave/direct/01/
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
