Signature Detail
Short Name |
P2P:WINNY:PEER-CONNECT |
|---|---|
Severity |
Info |
Recommended |
No |
Category |
P2P |
Release Date |
2006/04/27 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
P2P: WinNY Peer Connection
This signature detects a connection between peers using the WinNY file sharing system. WinNY is a popular Japanese file sharing application. File sharing can be a violation of your organization's acceptable use policy. This signature significantly impacts IDP performance and should be used only on a policy inspecting a WAN link and only if you suspect WinNY usage within your network. The recommended action for this signature is to "Drop Connection." This signature is prone to false-positives on LAN traffic. Before reporting false-positives, ensure that: You have applied this signature to your Internet-facing (WAN) links only, and that you are also detecting valid WinNY activity (which would indicate actual WinNY clients were active on your network).
Extended Description
None
References