I need to block remote access services, specifically starting with TeamViewer but also looking at LogMeIn, GoToMyPC, and so forth.
Has anyone been successful at blocking these services? Can you chart out how you did it? At the moment, I'm working on TeamViewer and here's the current strategy:
1) Ensure everyone is using internal DNS.
2) Block TCP/UDP 53 outbound from the network (except for internal DNS, of course).
3) Block "TeamViewer.Com".
4) Block port 5398, both directions (TeamViewer's normal port of operation).
5) Block IP range 178.77.120.0/24.
Model: FVS336Gv2|PROSAFE DUAL WAN GIGABIT FIREWALL WITH SSL & IPSEC VPN
I have listed down my answers to your question, please see below:
I am not sure if there is a way to check it on the router (but I'll try to inquire to our engineers). If there is not a lot of users, you may want to check if they DNS are obtained automatically.
Create an outbound rule, Security>Firewall Rules>Outbound Services.
Add TeamViewer.com on tbe "Blocked Keywords" table, Security>Block Sites.
Create an inbound and outbound rule, Security>Firewall Rules.
Do you want to block this IP range on all services?
I've done all but the DNS and content filter blocks I mention; I need to get another DNS server in place besides the proxy DNS on the firewall so I can properly manage those.
Do you (or anyone else) have any other suggestions for blocking these remote access services?
I apologize I misunderstood you post. Did you try using the content filter blocks by the way? I have read through various threads online and have seen that the best way is to use the DNS proxy.
We’d greatly appreciate hearing your feedback letting us know if the information I’ve provided has helped resolve your concern or if you need further assistance. If ever your concern has been resolved, I encourage you to mark the appropriate reply as the “Accepted Solution” so others can be confident in benefiting from the solution. The NETGEAR Community looks forward to hearing from you and being a helpful resource in the future!
