Support Support Downloads Knowledge Base Juniper Support Portal Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

How can I block Skype from my network?



Article ID: KB7798 KB Last Updated: 05 Mar 2017Version: 6.0
Is there any way to effectively block Skype calls (inbound and outbound) from my network?
Skype was specifically designed to elude firewalls and filters.
The Juniper Security Research Lab has released two new attack objects on March 1, 2006 that can assist users who wish to identify and block outgoing Skype connections.

Due to the Skype protocol's specific evasion techniques these attack objects can be very intensive on the inspection process; we recommend deploying these attack objects only on IDP sensors that monitor traffic for an outbound WAN link. LAN deployment is not recommended.

The 2 attack objects can be found in the VOIP/Internet Telephony Group under the Skype sub-group.
    (INFO) Skype: Login Attempt 1
    (INFO) Skype: Login Attempt 2

These signatures are available on IDP versions 3.0 and above, and ISG with IDP security modules.

Related Links

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search