Blocking certain Applications

[Knutern]

Hello,

i have been looking for ways to block certain applications from being able to reach the internet.

Interestingly, i found two statements regarding this:
[ul][li]one says: if you double-click on Firewall-Client (Client Configuration) and then add a new application, and set the disable key to 1 this application will not be able to reach anything on the net[/li][li]the second statement however, says that doing so only disables the firewall client. The application itself will still have access to internet.[/ul][/li]I have been testing for a while, and I can not block the application.

Does anybody out there have experience with this?

Cheers
Knutern

 

[paul123456]

Yes you can do this by either blocking the ports that the application is ran on or by using GPO to block the exe that the program runs on..i would block the protocol is uses because the user can rename the exe. use protocol filters and deny access outbound then to your client set that you choose or all users

Thanks, PAUL

 

[Knutern]

Hi,

well, suppose this specific application uses TCP 80. That would close all HTTP traffic. And, another problem arises if the application is able to use other ports.

I'd rather create a destination set which prohibits access to the destination - given i know which IPs this program wants to talk with.

It's more work, setting up a destination set at first, because you need to get hold on the IPs/Domains the application talks to. But then you know for sure, that if you deny by destination set, it will definitely not be able to pass ISA Server.

Cheers
Knutern