Category of ip address of Anydesk

Hi Yasin,

Thank you for contacting Sophos Community.

You may refer to the following post for reference. 

• community.sophos.com/.../how-to-allow-anydesk-in-xg-firewall-web-policy
• SSL/TLS Exception for Anydesk: https://community.sophos.com/sophos-xg-firewall/f/discussions/128212/ssl-tls-exception-for-anydesk
• Configure FQDN:docs.sophos.com/.../index.html

Hi Yasin,

Thank you for contacting Sophos Community.

You may refer to the following post for reference. 

• community.sophos.com/.../how-to-allow-anydesk-in-xg-firewall-web-policy
• SSL/TLS Exception for Anydesk: https://community.sophos.com/sophos-xg-firewall/f/discussions/128212/ssl-tls-exception-for-anydesk
• Configure FQDN:docs.sophos.com/.../index.html

I wrote the article "How to allow (or block) AnyDesk when using TLS Scanning" linked to by Erick above.

As described in the article, make sure you build your own allow list, the article is now two years old and the IPs listed in it are pretty out of date.

Would a FQDN host entry help solve the IP's dynamicly?

It works for me with Teamviewer.

The problem with FQDN is that Anydesk doesn't use them, it communicates directly with IPs (about 400 different ones). These aren't published but the article describes how to get a list of them and then exempt those IPs from TLS.