Popular in Mainland China, Thunder ( http://www.xunlei.com/) is a
P2P-based application that is able to download files with fast
speed. The use of Thunder application in corporate network
will consume network bandwidth dramatically, thus affecting
business daily operations. BroadWeb BSST has released a full
set of signatures that can recognize traffics of Thunder 5.4,
which is the most recent version. The signatures for blocking
Thunder are:
1052291 P2P Thunder HTTP File Download
1052683 P2P Thunder HTTP File Download - 2
1052292 P2P Thunder TCP File Download
1052681 P2P Thunder TCP File Download - 2
1052684 P2P Thunder TCP File Download - 3
1052682 P2P Thunder UDP File Download
Please be advised that Thunder also download files via
FTP protocol, and therefore network administrators need to
block <1050947 FTP Download file attempt> also in order
to fully control Thunder application.
Web Thunder is another kind of Thunder application. It
provides users with a web interface, and download files via
generic HTTP protocol. Since most computer users download
video or audio files via Web Thunder, network administrators
are advised to set the actions of the following signatures to
drop packets and reset connections in order to prevent
internal use of Web Thunder:
1052582 POLICY HTTP download with extension mp3
1052583 POLICY HTTP download with extension avi
1052584 POLICY HTTP download with extension rm
1052705 POLICY HTTP download with extension rmvb
1052585 POLICY HTTP download with extension mov
1052706 POLICY HTTP download with extension asf
1052707 POLICY HTTP download with extension wmv
Broadweb Security Service Team (BSST) - Empower Your
Network Security
Broadweb NetKeeper Intruder Prevention System delivers
the protection against intrusion, worms, DDOS, Instant
messaging, P2P, Web-Mail, and Web
Post. | 