topic Re: Allowing Skype through the PA in General Topics https://live.paloaltonetworks.com/t5/general-topics/allowing-skype-through-the-pa/m-p/22137#M16133 <HTML><HEAD></HEAD><BODY><P>Not sure what you want to know here.</P><P>Skype is already known traffic in the PA. It's identified as skype and skype-probe.</P><P>It should be enough to allow these two to allow skype.</P><P></P><P></P><P>Jo Christian</P></BODY></HTML> Thu, 28 Feb 2013 15:46:02 GMT jochristian 2013-02-28T15:46:02Z Allowing Skype through the PA https://live.paloaltonetworks.com/t5/general-topics/allowing-skype-through-the-pa/m-p/22136#M16132 <HTML><HEAD></HEAD><BODY><P>We have a business group that wants to use Skype. I am very concerned about allowing unknown-udp or unknown-tcp ports out through our PA. Has anyone allowed Skype through their PA and if so, can you offer any suggestions as to how to do it securely?</P></BODY></HTML> Tue, 26 Feb 2013 14:41:45 GMT https://live.paloaltonetworks.com/t5/general-topics/allowing-skype-through-the-pa/m-p/22136#M16132 john.langford@aplp.net 2013-02-26T14:41:45Z Re: Allowing Skype through the PA https://live.paloaltonetworks.com/t5/general-topics/allowing-skype-through-the-pa/m-p/22137#M16133 <HTML><HEAD></HEAD><BODY><P>Not sure what you want to know here.</P><P>Skype is already known traffic in the PA. It's identified as skype and skype-probe.</P><P>It should be enough to allow these two to allow skype.</P><P></P><P></P><P>Jo Christian</P></BODY></HTML> Thu, 28 Feb 2013 15:46:02 GMT https://live.paloaltonetworks.com/t5/general-topics/allowing-skype-through-the-pa/m-p/22137#M16133 jochristian 2013-02-28T15:46:02Z Re: Allowing Skype through the PA https://live.paloaltonetworks.com/t5/general-topics/allowing-skype-through-the-pa/m-p/22138#M16134 <HTML><HEAD></HEAD><BODY><P>You can also take a look at this document describing how you can control Skype</P><P><A __default_attr="1505" __jive_macro_name="document" class="jive_macro jive_macro_document" href="https://live.paloaltonetworks.com/"></A></P></BODY></HTML> Thu, 28 Feb 2013 15:51:01 GMT https://live.paloaltonetworks.com/t5/general-topics/allowing-skype-through-the-pa/m-p/22138#M16134 jochristian 2013-02-28T15:51:01Z Re: Allowing Skype through the PA https://live.paloaltonetworks.com/t5/general-topics/allowing-skype-through-the-pa/m-p/22139#M16135 <HTML><HEAD></HEAD><BODY><P>Jo Christian's approach is bang on.&nbsp; We granted access by Active Directory Group so that the user has the access where ever they may be on the network. We still block unknown TCP and UDP outbound connections.</P><P></P><P>Phil</P></BODY></HTML> Mon, 04 Mar 2013 03:30:30 GMT https://live.paloaltonetworks.com/t5/general-topics/allowing-skype-through-the-pa/m-p/22139#M16135 HITSSEC 2013-03-04T03:30:30Z