[26794] in resnet
Re: limit/block P2P
daemon@ATHENA.MIT.EDU (Fred Mowchan)
Fri Sep 30 10:50:15 2011
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Message-ID: <4e85d60f.0515640a.3bb3.6451@mx.google.com>
Date: Fri, 30 Sep 2011 09:45:34 -0500
Reply-To: Resnet Forum <RESNET-L@listserv.nd.edu>
From: Fred Mowchan <mowchafl@acu.edu>
To: RESNET-L@listserv.nd.edu
In-Reply-To: <4E84A797.5020502@calfrye.com>
I did look at the other players in the market and really like Palo Alto. But I have a Juniper 1000 doing firewall service and a Tipping Point doing deep signature idents so I didn't need all the bells and whistles something like the Palo Alto or Procera provided. Would have just been redundant. Plus price was so much cheaper.
P2P was actually the single most important service I wanted to control. They actually modified the class identification for p2p apps via scripting for me and allowed me to throttle down to a trickle.
Of course, the question is does it really work? One, I show dropped/ blocked traffic under my P2P policies; two, bandwidth reports show the traffic patterns along with connections to/from the Internet one would expect if you controlled P2P traffic; three, no copyright infringement notices (knock on wood).
So the combination of devices works for us. I pretty much leave the A10 alone and haven't had to mess with it much at all.
At 12:15 PM 9/29/2011, you wrote:
>On 9/29/11 12:31 PM, Fred Mowchan wrote:
>> ACU switched away from Packeteer several months ago to A10.
>> (http://www.a10networks.com/ ). We have the EX1100 limiting p2p. Also
>> do some traffic shaping. It's done a good job for us.
>> After some startup configuration issues that A10 worked to resolve
>> quickly, its been pretty much maintenance free for me.
>>
>Interesting choice. When I last looked at A10, they were fairly new to
>traffic shaping and their class identification wasn't rich enough for
>us. Do you have a sense that your A10 is identifying your p2p adequately?
>
>--
>Best regards
>-- Cal Frye, Network Administrator, Oberlin College
> Mudd Library, x.56930 -- CIT will NEVER ask you for your password!
>
> www.calfrye.com, www.oberlin.edu/cit/
>
>"If I repent of anything, it is very likely to be my good behaviour."
>--Henry David Thoreau (1817-62).
>
>___________________________________________________
>You are subscribed to the ResNet-L mailing list.
>
>To subscribe, unsubscribe or search the archives,
>go to http://LISTSERV.ND.EDU/archives/resnet-l.html
>___________________________________________________
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
