Blocking IM sofware without ISA

Posted on 2008-06-25
Last Modified: 2013-11-16
What is the best way to block IM software, e.g. MS Messenger, MSN Live, Yahoo IM, ICQ, from being used on a SBS network? Workstations are XP SP2, Firewall is on Vigor 2600+ router which is great for blocking web sites, but to block ports or IM clients, very hard to grasp.
Question by:sinisap
  • 2
  • 2

Accepted Solution

pjnofrills earned 250 total points
Comment Utility
You could block the port ranges but some of the new IM apps will just tunnel over port 80.
You could use OpenDNS or similar and block the following domains:

OpenDNS may have a category block for IM by now, I've been using them for a while now and it works great for small businesses to block certain types of traffic.

Expert Comment

Comment Utility
I checked and OpenDNS has a category that will block those sites from resolving properly, which would in effect block use of the program or web based chat/IM.

Author Comment

Comment Utility
Thanks a ton for suggestion.
I would give it a go, but further more, I'd like to know if it makes any difference where I define DNSs? E.G. I could go though DNS management or through the router (which requires restart of the same) and I'm hesitatnt to do that, since router is in London and I'm on the banks of the Danube :)

Expert Comment

Comment Utility
if you are using active directory in your organization, then you will create one OU in active directory users and computers and add the users in to the OU which you want to block IMs then go to group policy for current OU.
expand the computer configuration, go to windows settings, then security settings expand software restriction policies, on additional rules right click and click on new path rule , for example i installed msn messenger on server and took the local path of msn messenger in path option and set the security level disallowed and click ok and then on client side computer go to start run and type gpupdate /enforce. the policy will update and test the msn messenger. it will blocked. so  you can block all IMs with same step as we block msn messenger.


Author Closing Comment

Comment Utility
Not only was your answer just the right thing I was looking for, but it improved network speed in addition, too. So simple yet excellent solution!

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

This guide is intended to provide step by step instructions on how to migrate from Small Business Server 2003 to Small Business Server 2011. NOTE: This guide has been written using the preview version of SBS2011 therefore some of the screens may …
Because virtualization becomes more and more common, and, with Microsoft Hyper-V included in Windows Server at no additional costs, and, most server hardware nowadays is more than capable of running a physical Small Business Server (SBS) 2008 or 201…
The goal of the tutorial is to teach the user how to instant message and make a video call in Skype.
You have products, that come in variants and want to set different prices for them? Watch this micro tutorial that describes how to configure prices for Magento super attributes. Assigning simple products to configurable: We assigned simple products…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now