How to Block Skype

How to Block Skype

17773
Created On 09/25/18 17:50 PM - Last Modified 02/08/19 00:08 AM


Resolution

Details

To block Skype, Skype-probe needs to be allowed. Skype-probe runs over port 80 and is sets up initial connections. When Skype-probe is blocked, the application encrypts the communication and starts alternate open ports, which is why it needs to be allowed.

 

Steps

The following procedure blocks Skype traffic on the Palo Alto Networks firewall:

  1. From the Web UI, go to Policies > Security and click the Add icon in the lower left:
    2015-04-28 14_51_21-Phoenix-VM-Lab185.jpg
  2. Select Application tab and set the application to "Skype-probe."
    The source should be any applicable internal zones.
  3. Set destination to any.
  4. Set action to allow.
    skype_1.JPG
  5. Create a similar second rule but with the following changes:
  6. Select "Skype" as the application.
  7. Set the action to block.
    skype_2.JPG
  8. Commit your changes.

 

owner: panagent



Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClKTCA0&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments
Choose Language