Fortinet Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Lmelim
New Contributor II

Block Team Viwer and Anydesk

Hey

 

I want to create a rule to block teamviewer and ANYDESK so that users cannot access the inside network from outside.

I want, the IT helpdesk be allowed to user these 2 APPs when is necessary to give support to end usersat local network.

 

I was thinking to give them a profile access to the firewall just to disable and enable the rule whenever they need to acess the network with teamviwer or anydesk.....any ideas?

 

Thanks

1 Solution
AlexC-FTNT
Staff
Staff

Have you tried this with two policies:

inside > outside - where app control blocks the use of these apps

ouside > inside - where the 2 apps are allowed, and the admin starts a session to these apps

 

If that fails, another idea may be to use webfilter override so that the user can temporarily bypass that with a user/password you provide, and which you change or disable after the session. This may be more complicated to implement than your idea to disable/enable of app control profile on a policy for that specific user IP (so you don't allow everyone the access during that time).


- Toss a 'Like' to your fixxer, oh Valley of Plenty! and chose the solution, too00oo -

View solution in original post

1 REPLY 1
AlexC-FTNT
Staff
Staff

Have you tried this with two policies:

inside > outside - where app control blocks the use of these apps

ouside > inside - where the 2 apps are allowed, and the admin starts a session to these apps

 

If that fails, another idea may be to use webfilter override so that the user can temporarily bypass that with a user/password you provide, and which you change or disable after the session. This may be more complicated to implement than your idea to disable/enable of app control profile on a policy for that specific user IP (so you don't allow everyone the access during that time).


- Toss a 'Like' to your fixxer, oh Valley of Plenty! and chose the solution, too00oo -