How to Block Skype using App Control Advanced

03/26/2020 42 15538

DESCRIPTION:

Skype allows users to make voice calls over the Internet, using a proprietary VoIP network called the Skype protocol. After a user installs client software, calls to fellow Skype users are free-of-charge, while calls to landlines and mobile phones can be made for a fee.

This article describes how to block Skype traffic using SonicWall App Control Advanced feature.

RESOLUTION:

In order to effectively block Skype, it is required to enable Skype signatures as well as Signature IDs 5 & 7.

Note: Unlike other application signatures, there is no one-to-one relationship between each signature and a particular Skype function like video, chat, or audio. Therefore it is not possible presently to block a particular Skype feature individually.

• Login to the SonicWall Mangement GUI.
• Navigate to the Firewall | App Control Advanced page. In Gen5 TZ devices this page is under Security Services > App Control
• Check the box under Enable App Control and click on the Accept button at the top to enable App Control.
• Under App Control Advanced | View Style select IM under Category; select Skype under Application;
• Click on the configure button to bring up the Edit App Control App window.
• Select Enable under Block and Log
• Click on OK to save.

• Under Lookup Signature ID, enter 5, and 7 one after another and click on the configure button for each signature.
• In the Edit App Control Signature window, set Block and Log to Enable.
• Click on OK to save the settings.

Enabling Application Control on zones

• Navigate to Network | Zones
• Click on the configure button under the zone where you want to enable App Control.
• Check Enable App Control Service.
• Click on OK to save.

Resolution for SonicOS 6.5

This release includes significant user interface changes and many new features that are different from the SonicOS 6.2 and earlier firmware. The below resolution is for customers using SonicOS 6.5 firmware.

In order to effectively block Skype, it is required to enable Skype signatures as well as Signature IDs 5 & 7.

Note: Unlike other application signatures, there is no one-to-one relationship between each signature and a particular Skype function like video, chat, or audio. Therefore it is not possible presently to block a particular Skype feature individually.

Login to the SonicWall Mangement GUI.

1. Click Manage in the top navigation menu
2. Navigate to the Rules | Advanced Application Control page.
3. Check the box under Enable App Control 
4. Click on the Accept button at the bottom to enable App Control.
5. Under App Control Advanced | View Style select IM under Category; select Skype under Application;
6. Click on the configure button to bring up the Edit App Control App window.
7. You will see a Warning Message: Application's Block setting is the same as the Category to which it belongs. Your exception may not work as desired. Please double check and update your applicatio's Block settings
8. Click on OK if your sure that, you have not configured the same on Category Block.
9. Select Enable under Block and Log
10. Click on OK to save.

1. Under Lookup Signature ID, enter 5, and 7 one after another and click on the configure button for each signature.
2. In the Edit App Control Signature window, set Block and Log to Enable.
3. Click on OK to save the settings.

Enabling Application Control on zones

1. Click Manage in the top navigation menu
2. Navigate to Network | Zones
3. Click on the configure button under the zone where you want to enable App Control.
4. Check Enable App Control Service.
5. Click on OK to save.