Solved

completely block TeamViewer For FortiGate

Posted on 2016-09-25
5
199 Views
Last Modified: 2016-10-15
Hi.....
I need to completely block team access from outside to internal clients. I need to make sure in my network that no on uses team viewer in my network

i have Fortigate 300D
0
Comment
Question by:Rami Mansour
5 Comments
 
LVL 77

Assisted Solution

by:arnold
arnold earned 100 total points (awarded by participants)
ID: 41815455
Identify their IP range, and block outgoing traffic to that destination.

Adding the destination with a log event....

A simpler option in an AD environment, setup a software restriction GPO blocking the running of teamviewr.exe.
Note it will not prevent a determined individual from adjusting the application name, runn.........
0
 
LVL 69

Assisted Solution

by:Qlemo
Qlemo earned 100 total points (awarded by participants)
ID: 41815516
Blocking all IPs is hard to do, there are a lot of TeamViewer servers ...
Blocking the EXE itself is more promising, though easy to circumvent.
Anything else requires to analyze the traffic - very difficult, in particular with SSL.
0
 
LVL 25

Assisted Solution

by:Dr. Klahn
Dr. Klahn earned 100 total points (awarded by participants)
ID: 41815517
This page has a detailed explanation of one user's approach, which also short-circuits TeamViewer's fallback strategy of tunneling using port 80.

https://mediarealm.com.au/articles/2014/10/block-teamviewer-network/

However, as Qlemo points out above, if the application now tries to circumvent DNS blocking by using servers outside the teamviewer.com domain, it will probably be necessary to block the executable and hope none of your users are smart enough to rename it.
0
 
LVL 10

Accepted Solution

by:
Muhammad Mulla earned 200 total points (awarded by participants)
ID: 41816318
Under Application Control on your Fortigate, you will find 3 different signatures for TeamViewer in the Remote.Access category.

Block all of them under application overrides.
0
 
LVL 25

Expert Comment

by:Dr. Klahn
ID: 41844848
EE email requested stale question closure.
0

Featured Post

ScreenConnect 6.0 Free Trial

Explore all the enhancements in one game-changing release, ScreenConnect 6.0, based on partner feedback. New features include a redesigned UI, app configurations and chat acknowledgement to improve customer engagement!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Many admins will agree: WSUS is is a nice invention but using it on the client side when updating a newly installed computer is still time consuming as you have to do several reboots and furthermore, the procedure of installing updates, rebooting an…
The password reset disk is often mentioned as the best solution to deal with the lost Windows password problem. In Windows 2008, 7, Vista and XP, a password reset disk can be easily created. But besides Windows 7/Vista/XP, Windows Server 2008 and ot…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question