Sophos Windows Firewall and TeamViewer

What do I need to do to get this damn thing to work?  I'm having one hell of a time.  Works fine when I stop the service, but I'm unable to connect to it from my mobile, or any other device, when enabled.
LVL 2
BrianRBAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

BrianRBAuthor Commented:
FYI, I do have outbound stateful tcp 5938 enabled as well.  can browse the net just fine.

http://www.teamviewer.com/en/help/334-Which-ports-are-used-by-TeamViewer.aspx
0
btanExec ConsultantCommented:
hope it is not the application control policy blocking it
http://www.sophos.com/en-us/threat-center/threat-analyses/controlled-applications/TeamViewer.aspx

also good to chek the Firewall Live Log and Web Filtering Live Log, if they surface any error for TV. Saw another track stating to use various HTTP/HTTPS scanning mode.
https://www.astaro.org/gateway-products/network-protection-firewall-nat-qos-ips/23675-teamviewer-blocking-3.html
In "Transparent" modes, the Proxy handles only HTTP (and HTTPS if scanning is selected). That's why it can't manage Teamviewer unless HTTPS scanning is enabled.

In "Standard" modes, the proxy handles all of the services listed in 'Allowed target services' on the 'Advanced' tab. In these modes, your browser sends the unencrypted HTTPS URL to the Proxy, thus allowing it to do URL filtering as well as
0
Dirk KotteSECommented:
i think BrianRB uses a local software at his PC/Server like Sophos Enpoint Security ...

check the logfile seen at the following link, or do you have this problem also:
http://community.sophos.com/sophos/board/crawl_message?board.id=ESDP&message.id=16644
0
Top Threats of Q1 & How to Defend Against Them

WEBINAR: Join WatchGuard CTO and our Threat Research Team on Aug. 2nd to hear the findings from our Q1 Internet Security Report! Learn more about the top threats detected in the first quarter and how you can defend your business against them!

btanExec ConsultantCommented:
useful tips
http://www.sophos.com/en-us/support/knowledgebase/63997.aspx
Creating rules

Run as many applications as possible, that you know are used on computers on your network including web browsers. Details of these applications are recorded in the firewall logs.
Create a set of rules to allow these applications and then create a policy based on these rules.
Export this policy to Enterprise Console. This will provide the foundation upon which you can build other policies.

Rolling out the policy

Set the policy to 'Monitor mode' and roll it out to one or more groups on the network. This will now send reports back to the firewall log. Based on what is reported in the firewall logs, you can then update your policy to block or allow specified traffic.
Once you have run this for a while and are satisfied that you have designed policies to suit your network, reset the firewall to Block by default. Once you have done this it will block all traffic that is not specified in your policies.
0
BrianRBAuthor Commented:
D, you are correct.  Sorry I've been incognito guys.  None of this worked.  :(
0
btanExec ConsultantCommented:
have to see check the Intrusion Prevention, Application Control and Firewall logs to determine what is blocking then...if FW is turn off, can it work - should be (trying to ascertain it is default working). in forum there is also to the extend of allowing country to get it working per se

https://www.astaro.org/gateway-products/network-protection-firewall-nat-qos-ips/47474-teamviewer-country-blocking.html

although this is pertaining to UTM, there is specific version in Sophos in itself having conflict and some get it working with some config below

https://www.astaro.org/gateway-products/web-protection-web-filtering-application-visibility-control/48815-9-104-teamviewer-over-http-proxy-sometimes-not-working-2.html
Under Web filtering > Exceptions we have created the following new exception
Teamviewer [Allow Teamviewer Access]
Skipping: Authentication / Caching / Antivirus / Extension blocking / MIME type blocking / URL Filter / Content Removal / SSL scanning / Certificate Trust Check / Certificate Date Check
Matching these URLs: ^https?://([A-Za-z0-9.-]*\.)?teamviewer\.com/

Under firewall we have added a new rule called Teamviewer

Internet > TCP Port (Source: 1:65535) to (Destination: 5938) > Any IP4
0
BrianRBAuthor Commented:
Still nothing
0
btanExec ConsultantCommented:
Any error log in event viewer at the workstation, firewall log else this is wild goose chasing. even if sophos is blocking at machine then there should be some form of alert (via Application Control policy) too..
http://www.sophos.com/en-us/threat-center/threat-analyses/controlled-applications/TeamViewer.aspx
 ...also maybe disable Sophos and try windows firewall...same make sure the ports are open up ... after setting those rules try restart your PC. Make sure your changes in Windows Firewall are set for your current profile (Public, Home, Domain) Network.

Windows Firewall Profiles are related to Network Location Awareness (NLA). This allows you to apply a different set of Firewall rules depending on which network you are connected to. Please make sure that the profile you set is associated with the network you connected to.

Network Location Awareness (NLA) and how it relates to Windows Firewall Profiles
http://blogs.technet.com/b/networking/archive/2010/09/08/network-location-awareness-nla-and-how-it-relates-to-windows-firewall-profiles.aspx

Understanding Firewall Profiles
http://technet.microsoft.com/en-us/library/getting-started-wfas-firewall-profiles-ipsec(v=ws.10).aspx
0
BrianRBAuthor Commented:
Hey sorry I've been incognito.  Production has been crazy.  I went through everything you guys suggested and even what Sophos has on their site but still no joy.
0
btanExec ConsultantCommented:
can sophos just set the teamviewer server as exception IP address  or similar, if this doesnt even works then something is really wrong...

https://www.sophos.com/en-us/support/knowledgebase/115692.aspx
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
BrianRBAuthor Commented:
yeah it doesn't work :(
0
btanExec ConsultantCommented:
looks like better to get the sophos FW uninstalled and confirm it can access and if so, reinstall using latest ver with default setting and try out and then enable the port as mentioned earlier and exception. if all remains, then switch the FW s/w since the support cannot better advice - too much subtle details not surfaced.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Software Firewalls

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.