Best method to block Instant Messaging

[merrydc]

Working for a State Government agency, we are required to keep a record of any official electronic communication.  Using public Instant Messaging services creates a problem for us in that we don't have a mechanism for keeping copies of any transactions which are part of a Public Record conversation.

In light of this issue we would like to block Instant Messaging.  Is there a best practice or method to do this with the Palo Alto?  Is the solution just to block the Applications in the instant-messaging sub category?  Is there a better way or more efficient way that will catch all IM traffic?

Thanks for your help.

[swhyte · Accepted solution]

Blocking all of the Instant messaging applications that we have is a good way to go.

You can also incorporate a layered approach by utililizing our url filtering feature along with blocking the applications. You can use url filtering and block the category of of "Internet Communications" in the url filtering profile.

thank you,

Stephen

[networkadmin]

Stephen can you confirm exactly what categories of site "Internet Communications" contains please?

Is it just Instant Messaging or would it include things such as Skype and other VOIP sites or webmail or anything like that?

Thanks.

[spolo]

While it's difficult to name all the sites included in the "Internet Communications" category, a quick test shows that skype is included in that category, but webmail sites have their own category, entitled web based email.  You can test site categorization here if you like:

http://www.brightcloud.com/testasite.aspx

Hope this helps!