Hi, I need to block all the torrent downloads/services permanently from my network in the company.

Please help?

Hardly any info to go off of here, but:

My general answer as a start -

• Don't allow torrent software to be installed via Group Policy on a DC
• Block generally known ports for torrent and trackers
• Use a web proxy to block torrent sites
• Some deep inspection on firewalls will block torrents

Hi szboardstretcher, thanks for the response.

Is there any more specific solutions??

Provide a more specific picture of your network, network devices, traffic flow, clients and so on - and then you can inquire for more specifics. Put in the effort to describe your network and you will likely get better instructions on how to stop torrents on your network.

If you want specifics, you have to give specifics.

1 members found this post helpful.

A layer 7+ firewall before the subject system(s).

1 members found this post helpful.

do a company sweep of every PC in the place and uninstall any type of torrent client, then take away everyone rights to install anything on company PC's.

1 members found this post helpful.

This has been asked (and answered) on this site many, MANY times...please read the "Question Guidelines" and do a search first.

You need a layer 7 filter, period. That is the ONLY way you can accomplish this.

This works, but I feel it causes more administrative headaches for the sysadmins, and doesn't address the real problem, which is user behavior.

I hate for my folks to get calls to install trivial things (like a WebEx plugin, which WOULD install automatically), on a dozen machines, because of restricted rights like that. I'm a firm believer in accountability. Watching your network, you can easily find out who is using the most bandwidth. Once you have some likely suspects, a company-wide email saying "Look, don't do this or else..." is in order. Keep watching...see a network spike? Time for a visit, right then, with the manager in tow.

If they're found to be doing so, hand user a cardboard box to pack their stuff in, for violation of company policy/network security rules. Word will spread like wildfire, because the rules have now been shown to have TEETH, and will bite.

Agreed. Also, in that case it helps to delegate.

Yes IT makes the default images and says "Here are the rules, please follow them."

But in a company of 80k people, as you say, there is no way we are taking all those calls, so instead -- domain is split into geos/buildings/departments/management domains,.. and software installation can be allowed by local managers. And it's their ASS if they allow something that causes an issue on my network.