Solved

Block Skype Fortigate version 4 MR1

Posted on 2010-08-25
5
5,927 Views
Last Modified: 2013-11-09
Hi,

I am trying to configure a Fortigate 110C to block Skype traffic from exiting the LAN. All attempts to use application control to block P2p/Skype and apply that to a firewall protection profile have failed. The OS is 4.0 MR 1 Patch 6.

0
Comment
Question by:dlg654
5 Comments
 
LVL 3

Expert Comment

by:sasi_kmr
ID: 33528530
check to which ips they get connected and block that ip.

0
 

Author Comment

by:dlg654
ID: 33528550
Alas that can change. I am looking for a more generic solution
0
 
LVL 3

Expert Comment

by:sasi_kmr
ID: 33528574
i easiest way to block is to block 80 port.

else change the port number to something else in all the skype installation.

which ever is easier.

thanks,
$a$i
0
 
LVL 4

Expert Comment

by:goyal_251
ID: 33528597
Block 5060 TCP and UDP port.it will block SIP port
0
 
LVL 4

Accepted Solution

by:
iworks-uworks earned 250 total points
ID: 33531875
Configure the application control to block skype. Assign it to the protection profile of the policy that you want to block.
You MUST clear all sessions of the policy before it will work. Disable and re-enable the firewall policy (make sure you won't be disconnecting yourself) OR restart the firewall. I tested on a Fortigate 80C 4.0 MR1 Patch 4 and confirmed it.
If that doesn't work let me know.
0

Featured Post

Zoho SalesIQ

Hassle-free live chat software re-imagined for business growth. 2 users, always free.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Sonicwall SSO 11 51
Help enabling http access for Cisco ASA - (ET) 20 63
Cisco ASA 5506 - port forwarding not working 10 62
Skype Mobile application integration capabilities 1 69
I recently had the displeasure of buying a new firewall at one of the buildings I play Sys Admin at. I had to get a better firewall than the cheap one that I had there since I was reconnecting the main office to the satellite office via point-to-poi…
Sometimes we have such a need to use two Skype accounts, for example, you may have a personal and a business account that you want to keep separate. By default, Skype can be run only once. Attempting to start it a second time fails. However, we …
The goal of the tutorial is to teach the user how to instant message and make a video call in Skype.
I designed this idea while studying technology in the classroom.  This is a semester long project.  Students are asked to take photographs on a specific topic which they find meaningful, it can be a place or situation such as travel or homelessness.…

914 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now