Security

Ask something
Discussion Locked

Block Instant Messaging???

0 helpful
5 replies

by tty35

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I'm trying to find out how other Admins. go about blocking the numerous Instant Messaging Applications out on the Net (Yahoo IM, ICQ, etc..) from being use on their LANS. I used to combat this menace by blocking the various IP's to the Messaging Servers, but this is just a temporary solution as the providers just change their DNS settings for these servers to point to a new IP and then the services goes right past the Firewall. And blocking specific ports is no help as these applications now scan for available Outbound ports and use what's is open (i.e., http, ftp, etc..). So I'm trying to find out ways others have found to address this problem.

Any help would be much appreciated!

5 replies

by meganetcomputers

Is there a specific need for this within the company? There is a few things you can do to resolve this problem. One way is to use a program like lightning strikes where is will remove all programs except what is needed on the workstation. You can then prevent the user from installing the program by restricting there privileges on the machines. If this is not possible you can block a section of your lan's IP addresses at the proxy or firewall. If you need further assistance please e-mail me directly.

by null_connection

We're in the same boat as you and have tried all of the solutions you mentioned. Unsuccessfully.

We're getting ready to evaluate a product by Akonix (www.akonix.com) that's supposed to detect and impose network policy on all IM products. We're not up yet.

Kinda pricey.

If it doesn't work right, we're going to do software inventories on client workstations using SMS.

This discussion is closed to new replies.