Block incoming Teamviewer connections to internal IPs while allowing the outgoing ones

[Mohammedsalhi]

Dear Folks,

is it possible to use FortiGate Firewall to block incoming Teamviewer or anydesk connections to internal IPs, while allowing the outgoing ones? I cannot find a specific answer on any online resources.

Internal Users are allowed to use Anydesk for example to support users outside the company, while it is not allowed for anyone from outside the company to access the internal computers.

Thank you

[saleha]

Hello Mohammedsalhi,

Thank you for reaching out. You can block anydesk and Teamviewer traffic from outside to internal network by using internet service object as the destination. These address objects are located in the fortigate ISDB and if your fortigate have an active ISDB license the address objects will be updated regularly with the periodic fortiguard updates. Makes sure of the direction of the traffic you are blocking on the firewall policy as you mentioned you do wnat users to be allowed used the same tools on the outgoing direction. for reference on how to achieve this task, please follow the steps from the below links:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Block-Anydesk-using-ISDB/ta-p/230760

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Block-TeamViewer-using-the-ISDB-firewall-p...

Thank you,

saleha

[akushwaha]

Hi@Mohammedsalhi,

You can block anydesk by using application control, please refer to below article:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-Block-Anydesk-application-control/t...

Regards,
Abhimanyu