Blocking messenger apps

[stooo]

How do I block all messenger programs?

I can block msn messenger using the guide at

http://5xt.support.netscreen.safeharbor.com/knowbase/root/public/ns1058.htm

But I need to block them all (AOL messenger, ICQ, Yahoo messenger etc.)

Anyone got any guides or anything?

 

[0715]

I am also trying to figure out a way to do the same...There is a software called TerminatorX...I wonder if anyone has tred using it...

http://www.plevna.f9.co.uk/

 

[stooo]

Upgrading the netscreen to 5.2.0r2.0 gave me the options I needed to block pretty much any instant messenger app

 

[Chambers]

Is there any place to download the other OS's? My Support ran out and I never upgraded and I come to find out that there were like 5 updates during the time my support was active and they won't let me grandfather it and get those updates now since my support is up Any place to get those?

 

[sikek]

An easer answer would be just put a limit on what protocols you allow out in your policies.And what model netscreen do you have?

 

[stooo]

That would be an easier answer, if things like yahoo and msn weren'ty able to run over port 80 etc. I'm using 5GT's and 25 GT's

 

[Packet7]

Hello,
I simply block the netblocks (trust to untrust) being used by known IM Servers (among other things). This policy is at the top of my list and I log it from time to time to document who in the company is violating policy.

Rgds,

John

 

[amwoolf]

I'm using OS5.0 - upgraded to 5.1 to get the policies to block messenger programs and had several problems - slow downs, Outllok Web Access not working (when Deep Inspection activated), etc. Dropped back to 5.0. Manually added info to block MSN and AOL but need info on Yahoo. If anyone could provide info needed to block Yahoo I will be very grateful. Thanks.

 

[shrubble]

The easiest way to block these apps is the following:

(not on the firewall though)

Put entries on your DNS servers that resolve the DNS name of the login servers (like login.aol.oscar.com) to a bogus location (like 127.0.0.1 - localhost).

I know this sounds dopey, but it's remarkably effective, and takes a fairly technical user to get around it. You can also block the login server subnets on the netscreens (addresses can be found on google)... between these two things, no one is going anywhere!

"I would rather have a free bottle in front of me, than a pre-frontal lobotomy..."

-Shrubble