cancel
Showing results for 
Search instead for 
Did you mean: 
rplolo
Level 7

Block Skype File Transfer via DLP Endpoint

Hi,

Will DLP Endpoint solution be able to block skype file transfer? Client requires that Skype chat is allowed but block file transfer. Thanks!

0 Kudos
8 Replies
SafeBoot
Level 21

Re: Block Skype File Transfer via DLP Endpoint

I think this is best handled within Skype itself ?

Can I disable particular features of Skype?

0 Kudos
rplolo
Level 7

Re: Block Skype File Transfer via DLP Endpoint

hi safeboot,

it will work but that will be tedious on the part of admin. one way also is via registry. thanks for the help.

0 Kudos
vimalnavis
Level 13

Re: Block Skype File Transfer via DLP Endpoint

I agree with SafeBoot. Disabling the feature within Skype would be the best option.

You may use Network Communication Protection Rule to block file transfer using Skype (understand that there are caveats)

0 Kudos
stonewall
Level 7

Re: Block Skype File Transfer via DLP Endpoint

Hi guy,

1. I tried use NCPR to block skype transfer file. I got a notification "Network connection was blocked skype.exeSmiley Tongueort". But File sent.

2. How to disable the transfer file feature within skype from ePO?

3. How to block upload file to Dropbox for desktop.

0 Kudos
rphalen
Level 7

Re: Block Skype File Transfer via DLP Endpoint

1. Looks like skype uses 80/443 for communication, since most HTTP traffic uses 80/443 you wont be able to block those ports.

2. You will not be able to use ePO to disable functionality in skype. You may need to create a script to modify the registry and disable file transfer then use GPO to push to all machines.

3. DLPe 9.3.3 has Cloud protection rules to block Box, Dropbox, Google Drive, Sky Drive, and Synplicity.

0 Kudos
bphang
Level 10

Re: Block Skype File Transfer via DLP Endpoint

To answer #2 , like others have said Skype is not a MFE product. You can't use EPO to govern it. However you can use GPO

http://community.skype.com/t5/Windows-archive/Blocking-file-transfer/td-p/1758460

0 Kudos
spederse
Level 7

Re: Block Skype File Transfer via DLP Endpoint

Correction to #2

You can deploy software, scripts and registry changes from ePO using EEDK. So it is possible through ePO.

EEDK - ePO Endpoint Deployment Kit - Free tool for ePO to create ePO packages to deploy using ePO

0 Kudos
spederse
Level 7

Re: Block Skype File Transfer via DLP Endpoint

You can create a Notification and a Critical Alert if Skype is touching any files with classification tags.

Currently you can not Block using Application file access protection rules or using File system protection rules.

So if you allow using Skype you can Alert and Notify the user if they are breaking policy, but not block it. It might be something which will be added in coming releases of DLPE.