Endpoint Protection Small Business Edition

 View Only
Expand all | Collapse all

Need help in network protocol analyzers like wireshark,snoop,fiddler etc

  • 1.  Need help in network protocol analyzers like wireshark,snoop,fiddler etc

    Posted Oct 22, 2013 09:54 PM

    HI ,

     

    I need to block network protocol analyzers like wireshark,snoop,fiddler etc., in my network.

    I am aware that throuhg applicaton control policy , we could add every program in the list and block it.

    Instead of taking pain in adding all applications individually , can we write any firewall policy to block network protocol analysers?

     

    Regards,

    Anoop Jeevan.



  • 2.  RE: Need help in network protocol analyzers like wireshark,snoop,fiddler etc

    Posted Oct 22, 2013 09:57 PM

    Because they are passive, they won't generate any traffic from which the firewall would see. They simply watch the traffic. The only traffic you may be able to block is if they go out to check for an update, both wireshark and fiddler auto check for updates. You're best off using application control or whitelisting to stop these types of programs.