Want to Block just Yahoo & MSN Messenger

[osman]

Hi all
I just wanna now how to block Yahoo and Msn messenger using wingate?.. I've searched google and this forum, can't find easiest and reliable way, the only way I've got is to add fake server address for yahoo and msn messenger in servers HOST file but it will block messengers for all ( even for my CEO :P )

also opened a ticket for that, but if any 1 know here plz tell my how to block these 2 messengers for some clients in my network.
thnx

[logan]

Messaging programs are getting sneaky these days. In essence they will find any open hole in the firewall that they can use to connect out. This means, the only relaible way to block them from the gateway is to unplug the internet connection, but this is obviously counter productive. The reason modifying the domains in the hosts file is effective, is because it blinds the messaging application to the Internet. Even though there is an internet connection available, the messaging client can't figure out what IP it's meant to be connecting to, so can't make a connection out even though the gateway is entirely open.

What you could do is use the WinGate Internet Client on all the client computers in the network. If you have an enterprise license, you will be able to control what applications can access the internet from the client computers, or even what applications can run. This means blocking messaging applications is simply a case of blocking the exe itself, instead of the internet connections created from the exe.

[osman]

yes i can install wingate client at all clients... but wat happen if client uninstall the WGClient and use internet without it ?
i mean how can i force clients to must install WCG ?

and plz explain the complete configuration to block any IM using WGC

[logan]

but wat happen if client uninstall the WGClient and use internet without it ?

If the user uninstalls the client, the policies preventing messenger applications from accessing the internet will become ineffective.

i mean how can i force clients to must install WCG ?

My first thought would be to deny the users the right to uninstall software. My second thought would be to prevent the user from using an alternative internet connection method (such as NAT) so that if the WGIC is uninstalled, the computer loses its internet connection entirely.

and plz explain the complete configuration to block any IM using WGC

Here's a KB article that explains that.
http://support.qbik.com/index.php?_a=kn ... ails&_i=93