Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Application Signatures

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 Firewall] >> HTTP Filtering >> Application Signatures Page: [1]
Login
Message << Older Topic   Newer Topic >>
Application Signatures - 11.Oct.2004 7:03:00 PM   
Jop

 

Posts: 23
Joined: 27.Dec.2002
Status: offline 		Hoi,

Where I find these? I find some signatures on the NB Microsoft. But where I find more?

Jop
Post #: 1
RE: Application Signatures - 11.Oct.2004 7:41:00 PM   
Guest
 http://www.microsoft.com/technet/prodtechnol/isa/2004/plan/commonapplicationsignatures.mspx
[Wink]

(in reply to Jop)
  Post #: 2
RE: Application Signatures - 11.Oct.2004 9:09:00 PM   
Jop

 

Posts: 23
Joined: 27.Dec.2002
Status: offline 		Hi Ara,

Thanks for the link. I have found it yesterday and now I look for more signatures but I can't find anything.

Jop

(in reply to Jop)
Post #: 3
RE: Application Signatures - 15.Oct.2004 12:08:00 AM   
Jason Jones

 

Posts: 2119
Joined: 30.Jul.2002
From: United Kingdom
Status: online 		Signatures will be specific to each application and hence there is no central database of all applications. Ideally vendors will publish these signatures, but I guess in the real world they don't [Smile]

The only real way is to sniff the traffic and work out what signatures are being used and then create HTTP filters as necessary...

JJ

(in reply to Jop)
Post #: 4
RE: Application Signatures - 15.Oct.2004 11:48:00 AM   
kb¦s

 

Posts: 178
Joined: 1.Feb.2002
From: Silkeborg, Denmark
Status: offline 		after using the application signatures for MSN Messenger some internet sites cant be reached anymore.
When the clients want to see a provider of cards and routes manager, the actually card doesnt show anymore.
When i remove the application signatures for MSN Messenger everything works fine.
Using danish keys: µ ° s also cant be done anymore.

(in reply to Jop)
Post #: 5
RE: Application Signatures - 16.Oct.2004 11:42:00 PM   
Guest
 I am wondering if application signature is able to block new web messneger [Wink]

(in reply to Jop)
  Post #: 6
RE: Application Signatures - 16.Oct.2004 11:43:00 PM   
Guest
quote:
Originally posted by Jop:
Hi Ara,

Thanks for the link. I have found it yesterday and now I look for more signatures but I can't find anything.

Jop
What is the application list you are trying to block? [Confused]

(in reply to Jop)
  Post #: 7
RE: Application Signatures - 18.Oct.2004 11:14:00 AM   
kb¦s

 

Posts: 178
Joined: 1.Feb.2002
From: Silkeborg, Denmark
Status: offline 		New Messenger are not blocked by Appl. Sig.

(in reply to Jop)
Post #: 8
RE: Application Signatures - 18.Oct.2004 1:04:00 PM   
tshinder

 

Posts: 47408
Joined: 10.Jan.2001
From: Texas
Status: offline 		Hi KB,

I've blocked it using webmessenger in the signature. Very easy!

HTH,
Tom

(in reply to Jop)
Post #: 9
RE: Application Signatures - 19.Oct.2004 1:33:00 AM   
Guest
 right on [Big Grin]

(in reply to Jop)
  Post #: 10
RE: Application Signatures - 19.Oct.2004 11:57:00 AM   
Jop

 

Posts: 23
Joined: 27.Dec.2002
Status: offline 		Hi all,

I try to use http filtering before block url's and domains. I think thats the right way. I had some hope that that I can find a signatureslist/database. Now I try to sniff http traffic and find some signatures. I use the technet articel " HTTP filtering in ISA 2004".

Jop

(in reply to Jop)
Post #: 11
RE: Application Signatures - 19.Oct.2004 12:40:00 PM   
tshinder

 

Posts: 47408
Joined: 10.Jan.2001
From: Texas
Status: offline
quote:
Originally posted by <Ara>:
right on [Big Grin]
Hi Ara!

Good to see you on the Web boards [Smile]

Thanks!
Tom

(in reply to Jop)
Post #: 12
RE: Application Signatures - 19.Oct.2004 12:41:00 PM   
tshinder

 

Posts: 47408
Joined: 10.Jan.2001
From: Texas
Status: offline
quote:
Originally posted by Jop:
Hi all,

I try to use http filtering before block url's and domains. I think thats the right way. I had some hope that that I can find a signatureslist/database. Now I try to sniff http traffic and find some signatures. I use the technet articel " HTTP filtering in ISA 2004".

Jop
Hi Jop,

That's a good article and the method that I use too.

Tom

(in reply to Jop)
Post #: 13
RE: Application Signatures - 20.Oct.2004 10:50:00 AM   
kb¦s

 

Posts: 178
Joined: 1.Feb.2002
From: Silkeborg, Denmark
Status: offline
quote:
Originally posted by Jop:
Hi all,

I try to use http filtering before block url's and domains. I think thats the right way. I had some hope that that I can find a signatureslist/database. Now I try to sniff http traffic and find some signatures. I use the technet articel " HTTP filtering in ISA 2004".

Jop
This is the same articel i have used to configure the HTTP Filtering on two different ISA 2004 servers.
Both results are the same, some popular danish sites cant be used, including use of special danish caracters as µ, °, and s.

Knowing that Denmark 'only' have a population of about 6. mill people i dont think it is on the top of Microsoft¦s 'to do' list [Big Grin]

(in reply to Jop)
Post #: 14
RE: Application Signatures - 21.Oct.2004 5:27:00 AM   
Guest
quote:
Originally posted by tshinder:
quote:
Originally posted by <Ara>:
right on [Big Grin]
Hi Ara!

Good to see you on the Web boards [Smile]

Thanks!
Tom
My pleasure sir
[Wink] I am a noob but will be happy to assist [Smile]

(in reply to Jop)
  Post #: 15
RE: Application Signatures - 21.Oct.2004 3:39:00 PM   
Guest
 Tom,
I guess you donÆt like to see me in mailing list fighting and asking stupid questions [Wink]

(in reply to Jop)
  Post #: 16

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 Firewall] >> HTTP Filtering >> Application Signatures Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts