cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
rplolo
Level 7
Report Inappropriate Content
Message 1 of 9

Block Skype File Transfer via DLP Endpoint

Hi,

Will DLP Endpoint solution be able to block skype file transfer? Client requires that Skype chat is allowed but block file transfer. Thanks!

8 Replies
SafeBoot
Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 2 of 9

Re: Block Skype File Transfer via DLP Endpoint

I think this is best handled within Skype itself ?

Can I disable particular features of Skype?

rplolo
Level 7
Report Inappropriate Content
Message 3 of 9

Re: Block Skype File Transfer via DLP Endpoint

hi safeboot,

it will work but that will be tedious on the part of admin. one way also is via registry. thanks for the help.

vimalnavis
Level 13
Report Inappropriate Content
Message 4 of 9

Re: Block Skype File Transfer via DLP Endpoint

I agree with SafeBoot. Disabling the feature within Skype would be the best option.

You may use Network Communication Protection Rule to block file transfer using Skype (understand that there are caveats)

Re: Block Skype File Transfer via DLP Endpoint

Hi guy,

1. I tried use NCPR to block skype transfer file. I got a notification "Network connection was blocked skype.exe:port". But File sent.

2. How to disable the transfer file feature within skype from ePO?

3. How to block upload file to Dropbox for desktop.

rphalen
Level 7
Report Inappropriate Content
Message 6 of 9

Re: Block Skype File Transfer via DLP Endpoint

1. Looks like skype uses 80/443 for communication, since most HTTP traffic uses 80/443 you wont be able to block those ports.

2. You will not be able to use ePO to disable functionality in skype. You may need to create a script to modify the registry and disable file transfer then use GPO to push to all machines.

3. DLPe 9.3.3 has Cloud protection rules to block Box, Dropbox, Google Drive, Sky Drive, and Synplicity.

bphang
Level 10
Report Inappropriate Content
Message 7 of 9

Re: Block Skype File Transfer via DLP Endpoint

To answer #2 , like others have said Skype is not a MFE product. You can't use EPO to govern it. However you can use GPO

http://community.skype.com/t5/Windows-archive/Blocking-file-transfer/td-p/1758460

spederse
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 8 of 9

Re: Block Skype File Transfer via DLP Endpoint

Correction to #2

You can deploy software, scripts and registry changes from ePO using EEDK. So it is possible through ePO.

EEDK - ePO Endpoint Deployment Kit - Free tool for ePO to create ePO packages to deploy using ePO

spederse
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 9 of 9

Re: Block Skype File Transfer via DLP Endpoint

You can create a Notification and a Critical Alert if Skype is touching any files with classification tags.

Currently you can not Block using Application file access protection rules or using File system protection rules.

So if you allow using Skype you can Alert and Notify the user if they are breaking policy, but not block it. It might be something which will be added in coming releases of DLPE.

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community