Firewall – How to block SKYPE when it’s using port 80 & 443

access-control-listfirewallisa-serverport-443port-80

How to block SKYPE when it's using port 80 & 443 in a network. ( better if I can do it by using ISA 2006 and without disabling web) I know if users can't install skype they wont be able to use it. So without that?

Best Answer

A) Use blacklisting software or configure policies in AD to block the skype executable.

B) Use a firewall that can do the deep packet inspection and block the traffic.

C) Use your DNS server to intentionally poison requests to skype.com and their associated servers so you prevent skype from connecting.

D) Use software auditing programs and periodically get a report that will tell you who has skype installed and, through company policy, remind them that it's a firing offense if they repeatedly install software on company computers.

E) Remove privileges to users that enable software installation without administrative access.