KESC 11 - Block all internet except Skype

[Alex Luque]

Hi! I’m managing a network of over 300 computers, some of them will have all internet blocked from Web Control but we need to allow only Skype (mainly the Windows client), my aproach was to add a website access rule with the following web addresses:

*.skype.com/*
*.msn.com/*
*.atdmt.com/*
*.msftconnecttest.com/*
*.microsoft.com/*
*.live.com/*
 

After some weeks everything was working well but later some users started to tell me that Skype wasn’t working, they could only use it if I disabled the Kaspersky Endpoint Security client but enabling it again brought the same problem.
 

Could you say I used the correct approach by using that access rule? Maybe someone can tell if another web domain was needed?  Or perhaps there’s something in KESC that could allow all traffic from an application even if web control blocks all internet traffic? Thank you for your time.

[Nikolay Arinchev]

Hi,

 

could you please provide us with an export of active policy or KES configuration file?

Thank you!

[Alex Luque]

It seems it was solved when I created a copy of the policy and added a few more URLs like these:
https://client-s.gateway.messenger.live.com
https://browser.pipe.aria.microsoft.com
 

Skype started working again, but these URLs should be covered by *.microsoft.com/* and
*.live.com/* right?

I also attached the config file so you can verify it.

[Nikolay Arinchev]

Thank you for that info!

You need to correct web-control rule for skype.

Please select “any content” at allowing rule content filter.

Please infor us about result.

 

[Alex Luque]

Where can I find that “allowing rule content filter“? Does it work per application?

[Alex Luque]

I’m sorry, I’m a bit lost. Could you please give me the steps to set that part of “any content” for Skype? Please.

[Nikolay Arinchev]

Please take a look at the screenshot