How To Block Teamviewer accessing to PC's from outside Network on XG Firewall

It is kinda complicated to do so. 

You would have to block the Teamviewer Port (Port 5938) and block all access to their servers port 443. But this would block teamviewer completely (no access from your network). 

I guess, this is not possible on gateway level. Teamviewer relies on a communication to their server and it will build up a connection all the time as far as i know.

Hence i would suggest to contact Teamviewer if such a configuration is possible within Teamviewer. 

It is kinda complicated to do so. 

You would have to block the Teamviewer Port (Port 5938) and block all access to their servers port 443. But this would block teamviewer completely (no access from your network). 

I guess, this is not possible on gateway level. Teamviewer relies on a communication to their server and it will build up a connection all the time as far as i know.

Hence i would suggest to contact Teamviewer if such a configuration is possible within Teamviewer. 

i mean, what kind of configuration that i should set on My XG, i am very newbie for this XG Firewall.

i appreciate if you have tutorial, or screenshoot of this configuration.

Are you using https scanning and do you have the XG CA installed on your devices?

You should be able to block team viewer with a mix of web and application policies.

But as LuCar asked do you allow your staff to access team viewer for support outgoing?

Ian

Hello Rizky,

We have two signatures on the application filter and would suggest to add these two signatures as per the snapshot and add them to your application filter which is applied on your firewall rules.

You may refer this KBA as a reference in creating filter.

I have tested this with no scanning on HTTP/HTTPS and the latest teamviewer version 14.2.2558 and IPS version 9.15.73.

my staff don't use teamviewer for outgoing support., but we have vendor who should often use teamviewer for 2 server in our network.

so we want to block all user., except 2 IP for those servers.

Hi Rizky,

who initiates the connection to/from the servers? If it is always by your team then you can create firewall rule only allowing those two servers to access the support companies support IP address.

Ian

Forgot to mention you will need to disable the team viewer exception in the web exceptions tab.

Ian