Signatures Block on ISA Server

Common Application Signatures

Published: June 28, 2004

Introduction

This document provides examples of signatures, and of other parameters that characterize applications. You can use application signatures with ISA Server HTTP filtering to block specific applications. For more information, see HTTP Filtering in ISA Server 2004.

Signatures

This table provides some examples of common applications and their signatures.

Important

Headers can change over time, particularly when new versions of applications are released.

Application	Location	HTTP header	Signature
MSN Messenger	Request headers	User-Agent:	MSN Messenger
Windows Messenger	Request headers	User-Agent:	MSMSGS
Netscape 7	Request headers	User-Agent:	Netscape/7
Netscape 6	Request headers	User-Agent:	Netscape/6
AOL Messenger (and all Gecko browsers)	Request headers	User-Agent:	Gecko/
Yahoo Messenger	Request headers	Host	msg.yahoo.com
Kazaa	Request headers	P2P-Agent	Kazaa Kazaaclient:
Kazaa	Request headers	User-Agent:	KazaaClient
Kazaa	Request headers	X-Kazaa-Network:	KaZaA
Gnutella	Request headers	User-Agent:	Gnutella Gnucleus
Edonkey	Request headers	User-Agent:	e2dk
Internet Explorer 6.0	Request headers	User-Agent:	MSIE 6.0
Morpheus	Response header	Server	Morpheus
Bearshare	Response header	Server	Bearshare
BitTorrent	Request headers	User-Agent:	BitTorrent
SOAP over HTTP	Request headers Response headers	User-Agent:	SOAPAction

Other Parameters

This table provides other parameters that characterize applications.

Application	Location	Type	Value
Kazaa	Headers	Request Header	X-Kazaa-Username: X-Kazaa-IP: X-Kazaa-SupernodeIP:
BitTorrent	Extensions	None	.torrent
Many peer-to-peer clients	Headers	Request Header	P2P-Agent