Stoping Ninja Proxy and Messenger (Full Version)

All Forums >> [ISA 2006 Firewall] >> General



Message


isa_rooky -> Stoping Ninja Proxy and Messenger (12.Nov.2009 3:21:10 PM)

Hi everybody,
Is there a way to stop Ninja proxy website and messenger using my Isa Server 2006 stardard edition?

Thanks in advance!!




paulo.oliveira -> RE: Stoping Ninja Proxy and Messenger (13.Nov.2009 8:33:22 AM)

Hi,

you can block websites by using domain name set and block msn using messenger signature.

Regards,
Paulo Oliveira.




isa_rooky -> RE: Stoping Ninja Proxy and Messenger (16.Nov.2009 9:15:15 AM)

Hi Paulo and thanks for your reply.
The way I'm doing it is by adding a new rule where I deny all the domains I want, but in this particular case does not work with Ninja Proxy website. Can you please help me on this?




paulo.oliveira -> RE: Stoping Ninja Proxy and Messenger (16.Nov.2009 10:22:47 AM)

Hi,

are you using domain name set or URL set?

Can you provide details on your access rule?

Is it above the allow access rule?

Regards,
Paulo Oliveira.




isa_rooky -> RE: Stoping Ninja Proxy and Messenger (16.Nov.2009 10:35:37 AM)

Hi again Paulo and thanks a lot for your quick reply.
I'm using domain name set and is above the allow access rule. Is in the first place in my Firewall policy screen.




paulo.oliveira -> RE: Stoping Ninja Proxy and Messenger (16.Nov.2009 11:12:06 AM)

Hi,

is this site HTTPS? If so, ISA does not have a native HTTPS inspection feature, you may have to install a 3rd-party software:
http://www.collectivesoftware.com/
or
http://www.redline-software.com/eng/products/tk/components/ssl_decoder.php

On the other hand TMG (next ISA version) will have this feature built-in. [;)]

Regards,
Paulo Oliveira.




isa_rooky -> RE: Stoping Ninja Proxy and Messenger (16.Nov.2009 11:34:59 AM)

No, is not a HTTPS site. This is the address: http://myninjaproxy.info/




paulo.oliveira -> RE: Stoping Ninja Proxy and Messenger (16.Nov.2009 1:06:02 PM)

Hi,

can you provide details on your access rule and your domain name set?

Regards,
Paulo Oliveira.




isa_rooky -> RE: Stoping Ninja Proxy and Messenger (16.Nov.2009 1:46:11 PM)

Ok, this is how I created my rule:
1) Named my access rule.
2) On this applies to: All outbound traffic.
3) This rule applies to traffic from these sources: Internal
4) This rule applies to traffic sent to these destinations:
Here is where I go to Network Entities. click on Domain Name Sets and click add new Domain Name Set and type all the domains I want to block like this *.domain.com
5) This rule applies to requests from the following user sets: All users.

I hope this can help you.
Thanks again for following my issue.




paulo.oliveira -> RE: Stoping Ninja Proxy and Messenger (16.Nov.2009 5:39:41 PM)

Hi,

humm... it seems fine to me. Try *myninjaproxy.info

What does ISA log telling you?

Does your internal network range the same as your ISA Internal Network definition?

Regards,
Paulo Oliveira.




isa_rooky -> RE: Stoping Ninja Proxy and Messenger (17.Nov.2009 10:23:06 AM)

Hi Paulo, I tried what you suggested and it worked great. The problem was related with the dot before the domain.

Thanks a lot for your help!!!




paulo.oliveira -> RE: Stoping Ninja Proxy and Messenger (17.Nov.2009 4:36:38 PM)

Hi,

great!! Thatīs why I always put *domain.com [:D] no dot!

Regards,
Paulo Oliveira.




isa_rooky -> RE: Stoping Ninja Proxy and Messenger (18.Nov.2009 8:36:39 AM)

From now on I'll do the same.
Thanks again for your help!! See ya!




Page: [1]