• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Application Signatures

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 Firewall] >> HTTP Filtering >> Application Signatures Page: [1]
Login
Message << Older Topic   Newer Topic >>
Application Signatures - 11.Oct.2004 7:03:00 PM   
Jop

 

Posts: 23
Joined: 27.Dec.2002
Status: offline
Hoi,

Where I find these? I find some signatures on the NB Microsoft. But where I find more?

Jop
Post #: 1
RE: Application Signatures - 11.Oct.2004 7:41:00 PM   
Guest
http://www.microsoft.com/technet/prodtechnol/isa/2004/plan/commonapplicationsignatures.mspx
[Wink]

(in reply to Jop)
  Post #: 2
RE: Application Signatures - 11.Oct.2004 9:09:00 PM   
Jop

 

Posts: 23
Joined: 27.Dec.2002
Status: offline
Hi Ara,

Thanks for the link. I have found it yesterday and now I look for more signatures but I can't find anything.

Jop

(in reply to Jop)
Post #: 3
RE: Application Signatures - 15.Oct.2004 12:08:00 AM   
Jason Jones

 

Posts: 4663
Joined: 30.Jul.2002
From: United Kingdom
Status: offline
Signatures will be specific to each application and hence there is no central database of all applications. Ideally vendors will publish these signatures, but I guess in the real world they don't [Smile]

The only real way is to sniff the traffic and work out what signatures are being used and then create HTTP filters as necessary...

JJ

(in reply to Jop)
Post #: 4
RE: Application Signatures - 15.Oct.2004 11:48:00 AM   
kbs

 

Posts: 178
Joined: 1.Feb.2002
From: Silkeborg, Denmark
Status: offline
after using the application signatures for MSN Messenger some internet sites cant be reached anymore.
When the clients want to see a provider of cards and routes manager, the actually card doesnt show anymore.
When i remove the application signatures for MSN Messenger everything works fine.
Using danish keys: s also cant be done anymore.

(in reply to Jop)
Post #: 5
RE: Application Signatures - 16.Oct.2004 11:42:00 PM   
Guest
I am wondering if application signature is able to block new web messneger [Wink]

(in reply to Jop)
  Post #: 6
RE: Application Signatures - 16.Oct.2004 11:43:00 PM   
Guest
quote:
Originally posted by Jop:
Hi Ara,

Thanks for the link. I have found it yesterday and now I look for more signatures but I can't find anything.

Jop

What is the application list you are trying to block? [Confused]

(in reply to Jop)
  Post #: 7
RE: Application Signatures - 18.Oct.2004 11:14:00 AM   
kbs

 

Posts: 178
Joined: 1.Feb.2002
From: Silkeborg, Denmark
Status: offline
New Messenger are not blocked by Appl. Sig.

(in reply to Jop)
Post #: 8
RE: Application Signatures - 18.Oct.2004 1:04:00 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi KB,

I've blocked it using webmessenger in the signature. Very easy!

HTH,
Tom

(in reply to Jop)
Post #: 9
RE: Application Signatures - 19.Oct.2004 1:33:00 AM   
Guest
right on [Big Grin]

(in reply to Jop)
  Post #: 10
RE: Application Signatures - 19.Oct.2004 11:57:00 AM   
Jop

 

Posts: 23
Joined: 27.Dec.2002
Status: offline
Hi all,

I try to use http filtering before block url's and domains. I think thats the right way. I had some hope that that I can find a signatureslist/database. Now I try to sniff http traffic and find some signatures. I use the technet articel " HTTP filtering in ISA 2004".

Jop

(in reply to Jop)
Post #: 11
RE: Application Signatures - 19.Oct.2004 12:40:00 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
quote:
Originally posted by <Ara>:
right on [Big Grin]

Hi Ara!

Good to see you on the Web boards [Smile]

Thanks!
Tom

(in reply to Jop)
Post #: 12
RE: Application Signatures - 19.Oct.2004 12:41:00 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
quote:
Originally posted by Jop:
Hi all,

I try to use http filtering before block url's and domains. I think thats the right way. I had some hope that that I can find a signatureslist/database. Now I try to sniff http traffic and find some signatures. I use the technet articel " HTTP filtering in ISA 2004".

Jop

Hi Jop,

That's a good article and the method that I use too.

Tom

(in reply to Jop)
Post #: 13
RE: Application Signatures - 20.Oct.2004 10:50:00 AM   
kbs

 

Posts: 178
Joined: 1.Feb.2002
From: Silkeborg, Denmark
Status: offline
quote:
Originally posted by Jop:
Hi all,

I try to use http filtering before block url's and domains. I think thats the right way. I had some hope that that I can find a signatureslist/database. Now I try to sniff http traffic and find some signatures. I use the technet articel " HTTP filtering in ISA 2004".

Jop

This is the same articel i have used to configure the HTTP Filtering on two different ISA 2004 servers.
Both results are the same, some popular danish sites cant be used, including use of special danish caracters as , , and s.

Knowing that Denmark 'only' have a population of about 6. mill people i dont think it is on the top of Microsofts 'to do' list [Big Grin]

(in reply to Jop)
Post #: 14
RE: Application Signatures - 21.Oct.2004 5:27:00 AM   
Guest
quote:
Originally posted by tshinder:
quote:
Originally posted by <Ara>:
right on [Big Grin]

Hi Ara!

Good to see you on the Web boards [Smile]

Thanks!
Tom

My pleasure sir
[Wink] I am a noob but will be happy to assist [Smile]

(in reply to Jop)
  Post #: 15
RE: Application Signatures - 21.Oct.2004 3:39:00 PM   
Guest
Tom,
I guess you dont like to see me in mailing list fighting and asking stupid questions [Wink]

(in reply to Jop)
  Post #: 16

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 Firewall] >> HTTP Filtering >> Application Signatures Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts