Requires Free Membership to View
SearchSecurity.com members gain immediate and unlimited access to breaking industry news, virus alerts, new hacker threats, highly focused security newsletters, and more -- all at no cost. Join me on SearchSecurity.com today!
Michael S. Mimoso, Editorial DirectorFirst: RealAudio has the ability to tunnel streaming audio/video through
http. Use the HTTP Security Server to deal with this in the current version.
If you have CVP, you may be able to use the CVP server to screen out those
MIME types. If you are not using a CVP server, you can do this with a
wildcard URI. The URI Definition window would have the following in the
"Match" tab:
Schemes: HTTP
Methods: GET
Host: *
Path: {*/*.{ra,rm,ram},*.{ra,rm,ram}}
Query: *
You would then create a rule that uses this resource and denies access to anything matching this resource.
Second: Proxy by secure authentication, then content check.
Third: Block the ports or known IPs, such as those for Napster, if you know them. You can gain IP information through the use of logs.
I think this will solve or at least direct you.
For more information on this topic, visit these other SearchSecurity.com resources:
Featured Topic: Firewall Management
Best Web Links: Firewalls
Tech Tip: Performing firewall maintenance
This was first published in March 2002