It is possible to Block them if you have SmartDefense in R55... also need a rule in your firewall policy >From source Any to destination Any Service = P2P-File-Sharing-Applications (this service comes pre-defined from Checkpoint) Action =Drop Track=Log
But like Mike said...it is not efficient because P2P application will use any available port and some "great in-house programmer" may use those ports for their homegrown application...(do not laugh, there are still some Homegrown Applications left!) -----Original Message----- From: Oswaldo Silva Junior [mailto:[EMAIL PROTECTED] Sent: Thursday, December 02, 2004 1:20 PM To: [EMAIL PROTECTED] Subject: Re: [FW-1] How block Kazaa? I think that I misunderstood this issue. It isn�t possible to block P2P in CP AI R54 and R55. You can only track (log, alert) this type of traffic. I believe it�s possible only in R55W. am I wrong? regards, Dig. -----Original Message----- From: Michael J. Semaniuk [mailto:[EMAIL PROTECTED] Sent: quarta-feira, 1 de dezembro de 2004 23:29 To: [EMAIL PROTECTED] Subject: Re: [FW-1] How block Kazaa? What version of the firewall are you running? If it is AI R54 or R55, you can only block those protocols using SmartDefense when they are on port 80. If you're on R55w, then it should detect them on all ports. It's in the P2P section of the SmartDefense tab. If you are on a previous version of code, then you can try to block the ports, but it's not a very efficient way to go as the clients can generally be configured to work over any TCP port. Alternatively, you could look at products other than the firewall to manage this type of stuff. There are solutions from Akonix, Websense, SurfControl, etc. that have a story of some sort to help manage P2P applications. -Mike Oliver wrote: >Hi, Anybody knows how can i block Kazaa, eMule, etc >with SmartDefense or Resources?, I tried but didn't >work. >Regards, >Oliver > >_________________________________________________________ >Do You Yahoo!? >Informaci�n de Estados Unidos y Am�rica Latina, en Yahoo! Noticias. >Vis�tanos en http://noticias.espanol.yahoo.com > >================================================= >To set vacation, Out-Of-Office, or away messages, >send an email to [EMAIL PROTECTED] >in the BODY of the email add: >set fw-1-mailinglist nomail >================================================= >To unsubscribe from this mailing list, >please see the instructions at >http://www.checkpoint.com/services/mailing.html >================================================= >If you have any questions on how to change your >subscription options, email >[EMAIL PROTECTED] >================================================= > > > > ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
