Internet Related/Filtering/Firewall Thread, Tracking Skype usage in Websense in Technical; Hi there
We have recently allowed Skype on our curric network, and will be using Websense to track and report ...
26th April 2011, 05:10 PM #1
- Rep Power
Tracking Skype usage in Websense
We have recently allowed Skype on our curric network, and will be using Websense to track and report usage. Does anyone know the URL that Skype uses for the actual comms side of things, rather than just messaging or adverts? I think it might be ui.skype.com?
IDG Tech News
26th April 2011, 05:33 PM #2
Skype usage is really hard to track. As it is a peer to peer application it uses many different IP's over SSL tunnels to connect to other Skype users and lots of random port numbers. If Websense can do L7 filtering you can probably manage it but I don't think you could rely on a particular domain name to identify Skype.
This is a detailed explanation of Skype protocol (not for the faint hearted!)
Thanks to CensorNet from:
tom_newton (26th April 2011)
26th April 2011, 06:20 PM #3
Our anonymous pal from censornet has got it fairly spot on there. We're working on ways to track skype, but you can't do it by URL, and even when you can its "is using skype/is not using skype" kind of granularity
26th April 2011, 06:36 PM #4
Sorry, didn't mean to be anonymous It's Tim here - MD of CensorNet.
I'll try and set a sig in the settings
27th April 2011, 10:04 AM #5
- Rep Power
Thanks for the very useful info on Skype - I am hoping that we can do something similar to our tracking of Conficker with Websense. You can't actually see the activity par say, but you can see a signature pattern that is detectable. I will let you know how I get on !
27th April 2011, 10:28 AM #6
The IT Administrators Guide for Skype has some details on how it works along with settings which can be used to force it through a HTTPS or SOCKS5 proxy.
8th May 2012, 08:42 PM #7
Originally Posted by CensorNet
Welcome to the party.
8th May 2012, 08:44 PM #8
Our LEA refuse the use of Skype for the exact reasons - you cannot track it due to it using higher end ports above 1024, The LEA doesn't allow these ports - not even for staff.
It was brought up today in a meeting at Swansea LEA.
It also opens up the issue of child protection (which is outside this topic).
By timbo343 in forum Internet Related/Filtering/Firewall
Last Post: 23rd April 2010, 11:33 AM
By karldenton in forum Windows
Last Post: 14th July 2008, 01:13 PM
By contink in forum How do you do....it?
Last Post: 19th July 2007, 09:55 AM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)