Welcome to ISAserver.org

Block Messenger, independent of Hotmail

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Access Policies >> Block Messenger, independent of Hotmail

Page: [1]

Message

<< Older Topic Newer Topic >>

Block Messenger, independent of Hotmail - 20.Mar.2008 3:15:06 PM

bespinel

Posts: 2
Joined: 17.Mar.2008
Status: offline

This Solution is based on KB927847 "Ports of network and directions URL used by Windows Live Messenger".

Note: This rule must be before the rule that permit the different levels from navigation.

1. A URL set is created with the directions who indicates in KB927847, if you want, can be omitted some, like for example transferences of archives, games.

Example URL set “MSN”
https://Login.live.com
http://Login.live.com https://*.contacts.msn.com
https://*.storage.msn.com
http://*.storage.msn.com
http://c.msn.com
http://*.messenger.msn.com
http://g.msn.com
http://crl.microsoft.com
http://messenger.hotmail.com:1863
http://gateway.messenger.hotmail.com
http://config.messenger.msn.com
https://ows.messenger.msn.com
https://rsi.hotmail.com
http://sqm.microsoft.com
http://*.edge.messenger.live.com
http://relay.data.edge.messenger.live.com
http://rad.msn.com
http://appdirectory.messenger.msn.com
https://images.messenger.msn.com
http://spaces.live.com
http://relay.voice.messenger.msn.com

1.    Create a group in Toolbox - User - New User Set
The new User Set, must contain the users who have access to Messenger, can be a group of the AD, for our example the User Set is "MSN"

2.    Create one new rule.
Acces Rule Name:    Solo MSN
Action:                                    Allow
This rule applies to:    Selected protocols - HTTP y HTTPS
Sources:                     Internal
Destinations:              MSN
Users Set:                  MSN

3.    Create a URL Set who restricts Messenger
Example URL Set "Restringido"
https://Login.live.com
http://Login.live.com

4.    Apply a restriction that blocks Messenger to the rule that permit navigation.

_____________________________

Blas Espinel Freire

Post #: 1

Featured Links*

RE: Block Messenger, independent of Hotmail - 20.Mar.2008 6:33:22 PM

elmajdal

Posts: 5060
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

Hi,

Why not block it using signature, check this : http://www.isaserver.org/tutorials/ISA-Firewall-Quick-Tip-Blocking-MSN-Messenger-Access-Enabling-Access-Some-Users.html

HTH,
Tarek

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to bespinel)

Post #: 2

RE: Block Messenger, independent of Hotmail - 22.Mar.2008 7:21:38 AM

bespinel

Posts: 2
Joined: 17.Mar.2008
Status: offline

Thanks, I reviews this article, the articles of Thomas Shinder are excellent and they have served to me enough. This solution is a alternative not to work with heads, qualifies or blocks Live Messenger 8,1, can qualify the part chat and block transference of archives, games...

_____________________________

Blas Espinel Freire

(in reply to elmajdal)

Post #: 3