hi friends

i have heard that it is possible to code applications ( if i don't mistake) so that TMG can not distinguish the Application on the basis of signature. imagine we have a browser  which is coded ( something Like encryption, i mean the App has been encrypted) & TMG can't distinguished it). how can we block such unknown Applications ?

please describe the rule in details.

thanks in advance

Hi,

According to my research, we can block application with a HTTP signature. However, we need to know the applications signatures that we want to block.

In these scenario, I recommend using Network Monitor to capture packets and looking for a unique signature related to the application you want to block.

In TMG, URL Filtering enables you to block web content belonging to a particular URL category.

We can also use HTTPS Inspection to allow all HTTPS user traffic to be inspected by TMG.

More information, please refer to the links below:

Configuring HTTP filtering

http://technet.microsoft.com/en-us/library/cc995081.aspx

Configuring HTTPS inspection

http://technet.microsoft.com/en-us/library/dd441073.aspx

Blocking Skype and other IM protocols in Forefront TMG

http://www.microsoftnow.com/2010/06/blocking-skype-and-other-im-protocols-in-forefront-tmg.html

Common Application Signatures

http://technet.microsoft.com/library/cc302520.aspx

Best regards,

Susie Long

Hi,

According to my research, we can block application with a HTTP signature. However, we need to know the applications signatures that we want to block.

In these scenario, I recommend using Network Monitor to capture packets and looking for a unique signature related to the application you want to block.

In TMG, URL Filtering enables you to block web content belonging to a particular URL category.

We can also use HTTPS Inspection to allow all HTTPS user traffic to be inspected by TMG.

More information, please refer to the links below:

Configuring HTTP filtering

http://technet.microsoft.com/en-us/library/cc995081.aspx

Configuring HTTPS inspection

http://technet.microsoft.com/en-us/library/dd441073.aspx

Blocking Skype and other IM protocols in Forefront TMG

http://www.microsoftnow.com/2010/06/blocking-skype-and-other-im-protocols-in-forefront-tmg.html

Common Application Signatures

http://technet.microsoft.com/library/cc302520.aspx

Best regards,

Susie Long

hi friend. thank you very much for your great Guidance. you really help me.

best wishes....

Hi,

Thanks for the reply.

Good to hear that and it's my pleasure to help you.

Best regards,

Susie Long