Hi,
Anyone can help me to create a firewall rule to Block Teamviewer ??
Teamviewer works on port 80 to work both ways. (port 5938 is used to speed it up)
i noticed also that in every request there is a unique part in the path if this may help:
&client=DynGate&p=
and
/din.aspx ?s=
And the user agent is DynGate.
EXP: " - - - PROXIED “unavailable” - 200 TCP_NC_MISS GET application/octet-stream http xxx.xxx.xxx.xxx 80 /din.aspx ?s=10012112&id=47758753&client=DynGate&p=10000011 aspx “Mozilla/4.0 (compatible; MSIE 6.0; DynGate)” xxx.xxx.xxx.xxx 199 234 -"
Normis, this block is necessary if an employee wishes to conduct unauthorized remote access to your PC or other PC LAN.
Also need to accomplish this block here.
If it is against company policy then you don’t want to block it - you want to log it, present it to HR and discipline the culprit.
a couple of high profile roastings or even dismissals for a 2nd offence will solve the problem…
Trying to enforce policy through blocking or other technical means is a losing battle without support from management/HR as it just becomes a game of cat & mouse.
After all if the policy is ‘no personal phone calls’ then you don’t try and block all the phone numbers that staff might call, you manage the breaches with the support of management.
If you are in a domain environment or have other central management tool then setting a 30 minute idle sleep/hibernate would solve the problem (and save power!)
I would love to be able to block TeamViewer - but my situation is a little different. In my case, I am the TeamViewer user, but I want to be able to block TeamViewer unless I specifically allow it at the time - for example with a port knock to the router. For example, the computer at home can’t normally see the TeamViewer system, therefore as far as TeamViewer is concerned, that computer is off-line. From a remote location, I send a port knock sequence to the router which removes the block. The computer at home is able to communicate with the TeamViewer system, and it goes “available”. I can then remotely access the computer via TeamViewer.
