How to Block P2P and IM traffice on ASA

hi

IM isn't so difficult to block as the ports are usually consistent.  The problem arises with P2P software  like torrent programs, edonkey protocol etc.  The ports on these change periodically to circumvent users like yourself who are trying to keep control of them!

In essence, the real *solution* persay is not an ASA one but a HR one.  You are going to spend a lot of time trying to control people who are wasting company time/bandwidth and putting your company at risk by exposing it to insecure protocols and sites.  This issue is one that comes up a lot here and the best way to combat it is to let HR do its job and you do IT!

A security policy written by IT, backed by management, legal and HR is distributed to personnel.  Anyone caught breaching it is disciplined - watch people stop right there.  A security policy for this purpose is generally required for business compliance regulatory bodies like Sarbanes Oxley etc also - if a user is caught downloading pirate software etc by the Business Software Compliance body, your company will be legally responsible and legal action can be brought against you.  There really is a lot to this and to be honest, a policy indicating what a user can and cannot do is your best tool.  

hth