Skype is fairly aggressive when it's looking for open outbound ports
(i.e. not limited to using 80 and 443). I'd lock the firewall down
and use a packet trace to determine its search sequence.

I suspect you could also use URI inspection. Both FW-1 and PIX/ASA
support this. You could also use a proxy. This may help work around
HTTPS.

On 10/23/07, Siju George wrote:
> Hi,
>
> Is anybody doing Something like this on any of their firewalls?
>
> i.e blocking all web browsing and at the same time allowing only skype
> to the outside world?
>
> Could you please let me know how you do that?
>
> Thank you so much
>
> Kind Regards
>
> Siju
> _______________________________________________
> firewall-wizards mailing list
> firewall-wizards@listserv.icsalabs.com
> https://listserv.icsalabs.com/mailma...rewall-wizards
>
_______________________________________________
firewall-wizards mailing list
firewall-wizards@listserv.icsalabs.com
https://listserv.icsalabs.com/mailma...rewall-wizards