Bu cozumde cok "false positive" olmaz mi yani o hex serisi baska paketlerde de olabilir.Belki bu hex serisi ile port 443 , ve trafigin gittigi yer (DNS lookup vs) birlestirilerek 3-4 seye birden bakmak belki cozum uretebilir. Boyle genis kapsamli bi application firewall yada IPS var mi bilmiyorum.


Serhat


     

"build 1453" <build1453-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org> 22/08/2008 09:16 PM Please respond to netsec-OH8epulGT1/q0s6DQE6FoQ@public.gmane.org

To netsec-OH8epulGT1/q0s6DQE6FoQ@public.gmane.org cc Subject Re: [netsec] internet kısıtlamaları & ultrasurf ve benzerleri

Cevapların arasında Fortigate de birşekilde olduğundan bahsediliyor. Ama şu an için böyle bir durum söz konusu değil. Belki daha sonra çıkacak olan firmware'lerde mümkün olabilir. Ultra surf vb. yazılımları engellemek Sonicwall App. Firewall ile mümkün. Ekte konuyla ilgili birkaç ekran görüntüsü yolluyorum.[attachment "UltraSurf1.jpg" deleted by Serhat Uslay/HO/Australia/Zurich] [attachment "UltraSurf2.jpg" deleted by Serhat Uslay/HO/Australia/Zurich] [attachment "UltraSurf3.jpg" deleted by Serhat Uslay/HO/Australia/Zurich] [attachment "UltraSurf4.jpg" deleted by Serhat Uslay/HO/Australia/Zurich] ---------------------------------------------------------------------
To unsubscribe, e-mail: netsec-unsubscribe-OH8epulGT1/q0s6DQE6FoQ@public.gmane.org
For additional commands, e-mail: netsec-help-OH8epulGT1/q0s6DQE6FoQ@public.gmane.org

---- This email is intended for the named recipient only. It may contain information which is confidential, commercially sensitive, or copyright. If you are not the intended recipient you must not reproduce or distribute any part of the email, disclose its contents, or take any action in reliance. If you have received this email in error, please contact the sender and delete the message. It is your responsibility to scan this email and any attachments for viruses and other defects. To the extent permitted by law, Zurich and its associates will not be liable for any loss or damage arising in any way from this communication including any file attachments. We may monitor email you send to us, either as a reply to this email or any email you send to us, to confirm our systems are protected and for compliance with company policies. Although we take reasonable precautions to protect the confidentiality of our email systems, we do not warrant the confidentiality or security of email or attachments we receive.