Security – Is Opera Unite a security risk, and is there an easy way to block it

file-sharinghostingoperaSecurity

Given that Opera Unite allows users to share files (music, photos, etc.) through firewalls and without a web server, it seems to be a security risk for the enterprise.

An article on this at ZDNet:
http://news.zdnet.co.uk/internet/0,1000000097,39664228,00.htm
states "At this point, [you should] be a bit cautious in the files you're sharing — only share amongst people you trust."

What's the best way for a sysadmin to block Opera Unite sharing? Since the hosting computer must be running Opera Unite, attempts to block downloading and running that application could be attempted on the specific computer, but are there more foolproof methods to block the use of this tool, to prevent unauthorized and accidental file sharing?

Best Answer

That is definately a security risk inside any company.

I'd use wireshark or some other application to detect what ports Unite uses to share files, and then, if i have a firewall, block the outbound port, if i have a protocol filter, block the outbound protocol, and then with group policy, block the outbound application, and port in windows firewall.

http://www.infoq.com/news/2009/06/Opera-Unite States Opera Unite opens port 8840, so you can block that port in both directions, and you shouldn't have to worry about it.