port 80 downloading 1

[cahelmster]

Is there any way to allow port 80 for "

http://www"

but disable file downloads or plugins from websites? In other words, can I permit only web viewing without any downloads of any kind?

Is streaming video/audio still available by allowing port 80?

Thanks for your response...

 

[yizhar]

HI.

* You can use the pix to block JAVA and/or ACTIVEX inside http traffic:
filter java 80 any any
filter activex 80 any any

* The pix has no other built in http content filters, but it can relay the traffic to another 3rd party device that will do it.
So you can not block file downloads using the pix only.

* Steaming video/audio uses many different protocols.
Many of them use other ports then port 80.
So this should be checked on a per-application/protocol basis.

Other solutions you can consider are:
* A proxy server that can filter for your needs. This can also improve your network security in other aspects.

* Using IEAK you can centraly configure Internet Explorer on clients computers to not allow file downloads or other things.

Bye

Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar