topic Re: Block file sharing over skype in Firewall and Security Management

Block file sharing over skype

minhhaivietnam — Thu, 17 Oct 2019 02:54:10 GMT

Hi friends,

I have a checkpoint R80.10 like this:

User PC------>Firewall--------->internet

My requirement is Allow user to use skype but prevent them from sharing file over it.

My question is what blade can I enable for this purpose, and what step to configure after enable blade

Thanks a lot!!

Re: Block file sharing over skype

PhoneBoy — Fri, 18 Oct 2019 00:09:08 GMT

Skype traffic is encrypted, so it's not possible to see exactly what is being transmitted.
You could potentially use a "Limit" action to restrict the bandwidth to make file sharing impractical, but that will also impact calls/video conferencing.

Re: Block file sharing over skype

Ryan_Ryan — Fri, 18 Oct 2019 03:09:03 GMT

In my application control blade I have the following 3 applications available:

Skype For Business (Lync)

Skype For Business (Lync) - sharing

Skype For Business (Lync) - voice and video

So you could try and put a block rule against the sharing one, as the other poster said you may also need https inspection enabled to be able to detect the applications correctly. Easiest way is to check the logs and see if its showing the application name.

Re: Block file sharing over skype

minhhaivietnam — Fri, 18 Oct 2019 03:09:05 GMT

Thank phone_boy,

My boss want to prevent file transfering over skype while allowing chat only. I will convince him do it on Windows.

Tks!

Re: Block file sharing over skype

HristoGrigorov — Fri, 18 Oct 2019 03:41:05 GMT

Skype and Skype for Business are two different services. For Skype you can also use GPO to deactivate file sharing if you have the possibility.

Re: Block file sharing over skype

PhoneBoy — Sat, 19 Oct 2019 20:01:51 GMT

Skype does not support HTTPS Inspection because it uses Certificate Pinning.