• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

How can i block certains applications

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2000 Cache] >> Web Proxy Client >> How can i block certains applications Page: [1]
Login
Message << Older Topic   Newer Topic >>
How can i block certains applications - 27.Feb.2003 3:00:00 PM   
costi1010

 

Posts: 21
Joined: 14.Jan.2003
Status: offline
Hello All,
Have a look to the following log:
172.26.43.100 ER1\Popovici Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0) 2003-02-26 08:51:22 WS837 - 172.30.17.226 - 80 - 471 345 http GET http://www.google.de/images/hp3.gif NotModified 0
172.26.43.100 ER1\Popovici Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0) 2003-02-26 08:51:22 WS837 - 172.30.17.226 172.30.17.226 80 16 426 317 http GET http://www.google.de/images/cleardot.gif Upstream 200
172.26.43.100 anonymous Adobe Acrobat 2003-02-26 08:55:26 WS837 - update.adobe.com - 80 - 167 4116 http GET http://update.adobe.com/pub/adobe/acrobatreader/win/5.x/rp500enu.xml - 407
172.26.43.100 anonymous Adobe Acrobat 2003-02-26 08:55:35 WS837 - broker.adobe.com - 80 - 192 4116 http GET http://broker.adobe.com/Acrobat/index.cgi?Client=Reader&Version=0.2&Platform=Windows&Update=1 - 407

The thing is that some of the applications like Adobe Acrobat are trying to access on a regular bases the internet using the settings from IE.
I did what tshinder suggested me to allow only http and to configure the http redirector to drop request from firewall and secureNAT clients but it seems that it is not working. I also create in the firewall client mspclnt.ini file to add something like
[acrord32]
Disable=1
it didn't work as well.It means to me that these applications are not using winsock for having connections.
Does anybody know how to block some applications
that are using IE settings from ISA side to connect to the internet ... something like allow only Mozilla/4.0 c-agent for having connections to the internet ?
Regards,
Costi
Post #: 1
RE: How can i block certains applications - 27.Feb.2003 6:10:00 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Costi,

What makes you think its not working? Looks like its working fine!

Block the domains you don't want the clients to access using Site and Content Rules.

HTH,
Tom

(in reply to costi1010)
Post #: 2
RE: How can i block certains applications - 27.Feb.2003 6:28:00 PM   
costi1010

 

Posts: 21
Joined: 14.Jan.2003
Status: offline
Hello Tshinder,
Whenever i am seeing Adobe Acrobat or others applications in the ISA log it meens to me that
still those applic are trying to access some update sites, the problem is that in the client side those applic are in a wait state and are not working untill they are getting something or timeout. Adobe Acrobat it is one exemple but i have a plenty of applic that are doing the same thing.
Also to block those sites that are accessed by these applic it's a good ideea but you have to know those sites. I was wondering whether there is a more professional way to do it, maybe i miss something. Can you please give me a clue ?
Thanx in advance
Costi

(in reply to costi1010)
Post #: 3
RE: How can i block certains applications - 28.Feb.2003 7:36:00 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Costi,

Most of these applications can be configured not to check the Internet, but many of them have spyware/scumware, and the only way to know about them is to study your log files and block the sites. You can also use the Firewall client and the mspclnt.ini file to block these too, but I find Site and Content Rules the easiest way to do it.

HTH,
Tom

(in reply to costi1010)
Post #: 4

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2000 Cache] >> Web Proxy Client >> How can i block certains applications Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts