Blocking TeamViewer, LogMeIn, GoToMyPC, etc....

Question

I need to block remote access services, specifically starting with TeamViewer but also looking at LogMeIn, GoToMyPC, and so forth.

Has anyone been successful at blocking these services? Can you chart out how you did it? At the moment, I'm working on TeamViewer and here's the current strategy:

1) Ensure everyone is using internal DNS.

2) Block TCP/UDP 53 outbound from the network (except for internal DNS, of course).

3) Block "TeamViewer.Com".

4) Block port 5398, both directions (TeamViewer's normal port of operation).

5) Block IP range 178.77.120.0/24.

JohnRo · Answer

Hello Noctaire,&nbsp;

&nbsp;

Welcome to the community!&nbsp;

&nbsp;

I have listed down my answers to your question, please see below:

&nbsp;

I am not sure if there is a way to check it on the router (but I'll try to inquire to our engineers). If there is not a lot of users, you may want to check if they DNS are obtained automatically.&nbsp;
 Create an outbound rule, Security&gt;Firewall Rules&gt;Outbound Services.
 Add TeamViewer.com on tbe&nbsp;"Blocked Keywords" table, Security&gt;Block Sites.
 Create an inbound and outbound rule,&nbsp;Security&gt;Firewall Rules.
 Do you want to block this IP range on all services?&nbsp;

Click here for reference. Go to chapter 6.&nbsp;

&nbsp;

Let me know if you have questions.&nbsp;

&nbsp;

Thanks,

Noctaire · Answer

Thanks for the reply, JohnRo.&nbsp;I've done all but the DNS and content filter blocks I mention; I need to get another DNS server in place besides the proxy DNS on the firewall so I can properly manage those.&nbsp;Do you (or anyone else) have any other suggestions for blocking these remote access services?

JohnRo · Answer

Hi Noctaire,&nbsp;

&nbsp;

I apologize I misunderstood you post. Did you try using the content filter blocks by the way? I have read through various threads online and have seen that the best way is to use the DNS proxy.&nbsp;

&nbsp;

Thanks,&nbsp;

&nbsp;

DaneA · Answer

Hi&nbsp;Noctaire,

&nbsp;

We’d greatly appreciate hearing your feedback letting us know if the information I’ve provided has helped resolve your concern or if you need further assistance. &nbsp;If ever your concern has been resolved, I&nbsp;encourage you to mark the appropriate reply as the “Accepted Solution” so others can be confident in benefiting from the solution. The NETGEAR&nbsp;Community&nbsp;looks forward to hearing from you and being a helpful resource in the future!

&nbsp;

Regards,

&nbsp;

DaneA

NETGEAR Community Team

Forum Discussion

Blocking TeamViewer, LogMeIn, GoToMyPC, etc....

4 Replies

Related Content

Disneyplus.com blocked

Websites Blocked

Block sites

RBR850 blocking certain websites

[site blocked: 1d.tlu.dl.delivery.mp.microsoft.com]

NETGEAR Academy

ProSupport for Business