With the ability of modern day P2P appications to adapt to just about any network configuration, I have turned to a no tolerance policy. It is a cheap and simple solution. Show upper management the dangers of allowing the use of P2P in the enterprise and set up proper usage policies which all users sign before they get a network account. Use opensource monitoring tools such as NTOP, and you should be covered.
Bit of paper work, however it lays the foundations for a secure corporate network.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/271/28704#28704