Blocking binary data across port 80, PIX 515

[GrumpySmurf]

Greetings,
I have been asked to block all binary data attempting to traverse port 80. I have spent at least 4 hours googlin and gone through both my PIX books to no avail. Any pointers most appreciated.
rc

 

[baddos]

I don't think this is possible. I could be wrong though. You might be able to do it on a Cisco router using NBAR.

 

[GrumpySmurf]

Cisco replied:
On the Pix you can block Protocols and Ports. If you block a port that means the whole port is denied. Pix does layer 2 & 3 filtering. Any other type of filter that is at a higher level will be beyond the PIX's capabilities. So the answer to your question will be NO, you cannot allow just clear text and deny that rest within the port 80 or any other port.

So there ya go.