Answer the question
In order to leave comments, you need to log in
How to set up full Skype access while prohibiting everything else through a web proxy?
Hello.
Faced a problem when starting skype. Sometimes it hangs for a long time, cannot log in. You have to cut off the web-proxy on Mikrotik, after which Skype hangs and prompts you to enter credentials.
The proxy is configured as partially open, on the Skype site I did not find which specific addresses need to be allowed for the program to work smoothly, only a recommendation that ports 80 and 443 should be open.
Actually, the question is how to configure the web proxy in such a way as to prohibit everything, and give Skype access to everything it wants?
Answer the question
In order to leave comments, you need to log in
By and large, there are 2 working options:
1. Marking traffic and catching it on the firewall for passing
2. Rule for passing to Microsoft AS https://bgp.he.net/AS8075#_prefixes
I use so far settled on option 2 - it is simpler
3. Use something expensive that can catch traffic by content without decrypting it.
It seems like modern NGFWs like Cisco Firepower or Fortigate, etc., can do this.
If you need to block only file transfers, you can do it through the GPO in the registry
https://security.stackexchange.com/questions/23973...
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question