[2 days left] What’s wrong with your cloud strategy? Learn why multicloud solutions matter with Nimble Storage.Register Now

x
?
Solved

Blocking Streaming Media

Posted on 2004-08-09
7
Medium Priority
?
979 Views
Last Modified: 2010-04-09
I have a network of about 30 users and a lot are starting to use Media players to stream Music, sports, etc. We have blown our data useage buy a long shot for the past 2 months and I want to put a stop to it.

Can anyone tell me how to block both Windows Media and Real Player Streams.

If it helps, I have a Netscreen 25 Firewall.

Thanks

Andrew
0
Comment
Question by:andrewharris
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
7 Comments
 
LVL 15

Expert Comment

by:Yan_west
ID: 11758696
You have to block all outgoing traffic to port 1755
Real Media: Port 554

Actually, I would block all port by default, only opening the needed one... 80 for Http, etc.. deny everything first, and open up as needed, this is the better approach.
0
 
LVL 15

Accepted Solution

by:
Yan_west earned 2000 total points
ID: 11758736
Oh, and btw, people will  still be able to stream through port 80.. and you need it. Check in for firewall appliance if you can block  Mimes types.. (audio, etc..)

if you cannot, see if somewhere in your firewall config, you can block file extensions.. then you will be able to block all type of audio/video file (*.ram, *.wmv, *.wma, etc..)
0
 
LVL 4

Author Comment

by:andrewharris
ID: 11759288
Hmmm. As I thought...Port 80...The $%^&*( :-)

Gonna leave it open for a while longer to see if there is any other ideas (I doubt it, but just in case).

Andrew
0
Q2 2017 - Latest Malware & Internet Attacks

WatchGuard’s Threat Lab is a group of dedicated threat researchers committed to helping you stay ahead of the bad guys by providing in-depth analysis of the top security threats to your network.  Check out our latest Quarterly Internet Security Report!

 
LVL 36

Expert Comment

by:grblades
ID: 11765882
Hi andrewharris,
Does the netscreen support redirecting or validating URL's against a proxy server or blacklist There are various protocols for this such as WCCP.

If it does then you could setup a simple proxy server and configure it to allow/deny particular file types. You could also add on a blacklist to deny sites which only provide video files etc...

Even if it does not provide this functionality you could configure every browser to use the proxy and then only allow the proxy to access the web.
0
 
LVL 4

Author Comment

by:andrewharris
ID: 11768155
grblades,

Not as far as I know. Thanks anyway

Andrew
0
 
LVL 1

Expert Comment

by:amkessler
ID: 11772336
Sonicwall has a Feature called IPS (intrusion Protection Services) that does that and more. It will do reporting and bocking of ay predefind or custom service.  


I know you have a Netscreen, but if you are considering a trade up,  I think Sonicwall has a tradeup program still in effect, I know they did for a while in the spring.  The cost of a 25 user sonicwall Tz 170 with the necessary bells and whistles should be no more that $1700.  The newist firmware even does external wireless AP's and guest services.  A very good thing to look at.
0
 
LVL 4

Author Comment

by:andrewharris
ID: 11829943
OK,

Well no one seems interested. Thanks all.

Andrew
0

Featured Post

When ransomware hits your clients, what do you do?

MSPs: Endpoint security isn’t enough to prevent ransomware.
As the impact and severity of crypto ransomware attacks has grown, Webroot has fought back, not just by building a next-gen endpoint solution capable of preventing ransomware attacks but also by being a thought leader.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you are like regular user of computer nowadays, a good bet that your home computer is on right now, all exposed to world of Internet to be exploited by somebody you do not know and you never will. Internet security issues has been getting worse d…
The DROP (Spamhaus Don't Route Or Peer List) is a small list of IP address ranges that have been stolen or hijacked from their rightful owners. The DROP list is not a DNS based list.  It is designed to be downloaded as a file, with primary intention…
In this video, Percona Solution Engineer Dimitri Vanoverbeke discusses why you want to use at least three nodes in a database cluster. To discuss how Percona Consulting can help with your design and architecture needs for your database and infras…
In this video, Percona Solutions Engineer Barrett Chambers discusses some of the basic syntax differences between MySQL and MongoDB. To learn more check out our webinar on MongoDB administration for MySQL DBA: https://www.percona.com/resources/we…

649 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question