| Author |
Message |
Jerry Farrell
Guest
|
Posted:
Tue Jan 11, 2005 2:25 am Post subject:
How do I close AOL IM,MSN Messenger and Yahoo Chat Ports |
|
|
We have recently hired a few new folks who have loaded and installed AOL,
YAHOO AND MSN Instant messengers and chats. What are the ports that these
communicate on so I and close access and prevent any virus or worms etc....???
TIA, I really need to get these closed asap. Is there a white papaer or KB
on how to do this. |
|
| Back to top |
|
 |
Merv Porter [SBS-MVP]
Guest
|
Posted:
Tue Jan 11, 2005 6:18 am Post subject:
Re: How do I close AOL IM,MSN Messenger and Yahoo Chat Ports |
|
|
Maybe some help here...
How to Block Dangerous Instant Messengers Using ISA Server
http://isaserver.org/tutorials/How_to_Block_Dangerous_Instant_Messengers_Using_ISA_Server.html
But remember, this is a managment (people) problem rather than a technical
one. There should be an "Acceptable Computer Use" policy in place and
acknowledged by all employees (with responsibilities and consequences
clearly spelled out). Blocking or controlling IM is just one facet of
overall security and you'll be chasing your (technical) tail until that
policy is in place and enforced. Push management to own up to its
responsibilites.
--
Merv Porter [SBS MVP]
===================================
"Jerry Farrell" <JerryFarrell@discussions.microsoft.com> wrote in message
news:097E4DA3-2599-4A2F-B40E-9FE5F831A6F7@microsoft.com...
| Quote: | We have recently hired a few new folks who have loaded and installed AOL,
YAHOO AND MSN Instant messengers and chats. What are the ports that these
communicate on so I and close access and prevent any virus or worms
etc....???
TIA, I really need to get these closed asap. Is there a white papaer or KB
on how to do this. |
|
|
| Back to top |
|
 |
Lanwench [MVP - Exchange]
Guest
|
Posted:
Tue Jan 11, 2005 8:17 am Post subject:
Re: How do I close AOL IM,MSN Messenger and Yahoo Chat Ports |
|
|
Jerry Farrell wrote:
| Quote: | We have recently hired a few new folks who have loaded and installed
AOL, YAHOO AND MSN Instant messengers and chats. What are the ports
that these communicate on so I and close access and prevent any virus
or worms etc....???
TIA, I really need to get these closed asap. Is there a white papaer
or KB
on how to do this.
|
In addition to Merv's reply, if you don't have ISA, note that a lot of stuff
like this won't work if you allow only HTTP (80) and HTTPS (443) access
outbound in your firewall for your client workstations (don't lock down your
server IPs that way). |
|
| Back to top |
|
 |
Rick Dilley
Guest
|
Posted:
Tue Jan 11, 2005 8:34 pm Post subject:
Re: How do I close AOL IM,MSN Messenger and Yahoo Chat Ports |
|
|
HooRay! Merv....
I will take it a step further.....how in the world did the users load the
software....?
what compelling business purpose is there for them to have authority to load
software....?
In my opinion, and in the domains that I manage the users DO NOT HAVE THE
ABILITY TO LOAD SOFTWARE. If they want a piece of software, they have to ask
and then explain WHY they want it. Since we are SBS and if approved, I setup
a distribution and let sbsclnt "push" it out to the desktop. I then login,
remotely, and use "run as" to install.
This can only be achieved through Management support....so we now arrive at
the real crux of the problem.
Explain to management that the ASSET of the business critical network is,
perhaps, the MOST valuable asset in the company...more valuable than
inventory, plant and equipment and trade secrets....AND that they have to
accord the same level of security to the mission critical network as the
other major assets of the corporation.
Not to mention the productivity loss due to personal communications via IM.
I am glad that you gave me this opportunity to get on a soapbox and present
my vision of IT in today's world.
Thanks
RickD
"Merv Porter [SBS-MVP]" <mwport@no_spam_hotmail.com> wrote in message
news:ewRdFM39EHA.3840@tk2msftngp13.phx.gbl...
ng_ISA_Server.html
| Quote: |
But remember, this is a managment (people) problem rather than a technical
one. There should be an "Acceptable Computer Use" policy in place and
acknowledged by all employees (with responsibilities and consequences
clearly spelled out). Blocking or controlling IM is just one facet of
overall security and you'll be chasing your (technical) tail until that
policy is in place and enforced. Push management to own up to its
responsibilites.
--
Merv Porter [SBS MVP]
===================================
"Jerry Farrell" <JerryFarrell@discussions.microsoft.com> wrote in message
news:097E4DA3-2599-4A2F-B40E-9FE5F831A6F7@microsoft.com...
We have recently hired a few new folks who have loaded and installed
AOL,
YAHOO AND MSN Instant messengers and chats. What are the ports that
these
communicate on so I and close access and prevent any virus or worms
etc....???
TIA, I really need to get these closed asap. Is there a white papaer or
KB
on how to do this.
|
|
|
| Back to top |
|
 |
Jerry Farrell
Guest
|
Posted:
Thu Jan 13, 2005 3:33 am Post subject:
Re: How do I close AOL IM,MSN Messenger and Yahoo Chat Ports |
|
|
I do have ISA up and running and hope the fixes mentioned will do the trick.
Other suggestions are welcome.
"Lanwench [MVP - Exchange]" wrote:
| Quote: | Jerry Farrell wrote:
We have recently hired a few new folks who have loaded and installed
AOL, YAHOO AND MSN Instant messengers and chats. What are the ports
that these communicate on so I and close access and prevent any virus
or worms etc....???
TIA, I really need to get these closed asap. Is there a white papaer
or KB
on how to do this.
In addition to Merv's reply, if you don't have ISA, note that a lot of stuff
like this won't work if you allow only HTTP (80) and HTTPS (443) access
outbound in your firewall for your client workstations (don't lock down your
server IPs that way).
|
|
|
| Back to top |
|
 |
|
|
|
|