cancel
Showing results for 
Search instead for 
Did you mean: 
mardes
Level 7
Report Inappropriate Content
Message 1 of 6

New infos for Skype detection with MWG7 proxy?

Hello!

I wonder if there are new infos concerning  Skype detection in a MWG7 proxy based internet connection.

We need a solution for allowing  Skype through MWG (V7.2.0.8)  proxy   for some users.

Because Skype has some typical network behaviour even in proxy environment and

since most network based (NG-) firewalls can detect skype traffic I think it should be possible to solve this.

In the moment we use a very simple SSL-Scanner ruleset part for Skype separation:

Skype-Rule.bmp

Membership of group PowerUsers comes from  NTLM authentication.

Of course, this disables SSL scanning for more than just Skype connections.

Is there a better solution?

Best regards,

Michael Ardes

5 Replies
Highlighted
McAfee Employee jscholte
McAfee Employee
Report Inappropriate Content
Message 2 of 6

Re: New infos for Skype detection with MWG7 proxy?

Hi Michael,

Making the assertion that any request made by IP address is skype is not a good idea. This is especially true in transparent setups.

In the past I have posted about this previously, but the cleanest way to know if a request is coming from skype is to direct it to a separate proxy port.

Here is an example ruleset I have offered:

ftp://ftp.support.securecomputing.com/outgoing/skype-proxy.zip

As far as detecting the traffic, at the moment MWG cannot differentiate between skype SSL and normal SSL. Skype SSL is a broken version of normal SSL (from what I understand).

Best,

Jon

Re: New infos for Skype detection with MWG7 proxy?

How prevent this solution the use of the Skype port by normal https traffice which is manual entered in internet options?

McAfee Employee smasnizk
McAfee Employee
Report Inappropriate Content
Message 4 of 6

Re: New infos for Skype detection with MWG7 proxy?

As FTP link become invalid I've reupload this rule set to ftp://ftp.webwasher.com/pub/MWG/skype-proxy.zip

-Sergej

Re: New infos for Skype detection with MWG7 proxy?

Hello, it works? I have the same issue and I cannot find a solution

McAfee Employee aloksard
McAfee Employee
Report Inappropriate Content
Message 6 of 6

Re: New infos for Skype detection with MWG7 proxy?

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator
  • Community Help Hub

      New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

    • Find Forum FAQs
    • Learn How to Earn Badges
    • Ask for Help
    Go to Community Help

    Join the Community

      Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

    • Get helpful solutions from McAfee experts.
    • Stay connected to product conversations that matter to you.
    • Participate in product groups led by McAfee employees.
    Join the Community
    Join the Community