Skip to main content
ssteo
Staff
Staff
November 24, 2022

Technical Tip: Block Anydesk using ISDB

Description This article describes how to block AnyDesk traffic without UTM configured, and then it is possible to block it using ISDB.
Scope FortiGate, FortiProxy.
Solution
  1. Go to Policy & Objects and select 'Create New'.
  2. Destination -> Internet Service -> Filter the name 'anydesk' and select 'Anydesk-Anydesk'.

 

ssteo_1-1669279035027.png

 

  1. Configure other fields and select 'OK'.
  2. Drag the policy to the top to take effect.

 

Command on the CLI:

 

config firewall policy
    edit 0
        set name "Block Anydesk"
        set srcintf "lan"
        set dstintf "virtual-wan-link"
        set srcaddr "all"
        set internet-service enable
        set internet-service-name "AnyDesk-AnyDesk"
        set action deny
end

 

Below are the ports and URLs used by AnyDesk:
TCP ports: 80, 443, and 6568.
UDP ports: 50001–50003.
*.net.anydesk.com.

 

To view the list of the IP address and port used by AnyDesk in the FortiGate CLI, use the following command:

 

diagnose internet-service id | grep AnyDesk-AnyDesk
ID: 5963927 name: "AnyDesk-AnyDesk"

 

diagnose internet-service id 5963927

 

Sample output from the FortiGate:

 

diagnose internet-service id 5963927
Internet Service: 5963927(AnyDesk-AnyDesk)
Version: 00007.04378
Timestamp: 202511220602
Number of Entries: 368
3.162.3.102-3.162.3.102 country(124) region(1536) city(65535) blocklist(0x0) reputation(5), popularity(3) domain(2016) botnet(0) proto(6) port(80 443 6568)
3.175.34.100-3.175.34.100 country(840) region(1380) city(9976) blocklist(0x0) reputation(5), popularity(3) domain(2016) botnet(0) proto(6) port(80 443 6568)
5.188.71.12-5.188.71.12 country(392) region(1906) city(65535) blocklist(0x0) reputation(5), popularity(3) domain(2016) botnet(0) proto(6) port(80 443 6568)
5.188.71.27-5.188.71.27 country(392) region(1906) city(65535) blocklist(0x0) reputation(5), popularity(3) domain(2016) botnet(0) proto(6) port(80 443 6568)
5.188.71.30-5.188.71.30 country(392) region(1906) city(65535) blocklist(0x0) reputation(5), popularity(3) domain(2016) botnet(0) proto(6) port(80 443 6568)

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT