TOPIC:

Hi guys, just wondering anyone has experience with blocking bots using service ports like 80 etc on a LAN e.g. using access lists, etc From my research, expensive kits like Cisco ASA firewall can be used but we cannot afford such kits at work so looking for an alternative.

Also, blocking them in general

any contributions appreciated

Skylimit,

Using Cisco ASA devices on a local LAN is indeed an expensive practice - not to mention you would needed a Gigabit Ethernet ASA to ensure the firewall doesn't create any bottlenecks!

A much cheaper and effective alternative would be to use a security product such as Symantec Endpoint Security - SEP. We use this product for our customers. It contains an embedded Firewall, Network Threat protection and much more. I believe this would be an ideal solution for you.

Hope that helps,

Cheers

thanks