Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 19 replies
  • Subscribers 1 subscriber
  • Views 35498 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

[9.104] Teamviewer over HTTP-Proxy sometimes not working

DarKRR
Hello,

the teamviewer host software is installed on all machines in my network. I configured the firewall's IP as proxy server and entered the credentials of a user with no web surfing restrictions. Since UTM 9.1 Teamviewer is only working randomly. Sometimes it asks for a proxy user and password and refuses them, sometimes it says "Check your internet connection" and sometimes Teamviewer is working.

The following steps didn't improve the situation:

  • Open 5938/tcp to the internet
  • Creating a webfilter exception with the following content:

    Authentifizierung / Zwischenspeichern / Antivirus / Dateierweiterungen / MIME-Typ / URL-Filter / Inhaltsentfernung / SSL-Scan / Zertifikat-Vertrauensprüfung / Zertifikatsdatumsprüfung
    for URLs
    dyngate .com
    92.51.171.70
    ^http://.*/din.aspx.*DynGate.*
    ^http://.*/dout.aspx.*DynGate.*
    ^http.?://.*teamviewer.com.*
    ^http.?://.*teamviewer.de.*
  • Adding and removing a valid proxy user from Teamviewer's configuration.


It seems that the requests are covered by the exception (see below) but the connection doesn't work.

2013:08:20-11:37:06 ASG-1 httpproxy[5792]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.168.1.18" dstip="178.77.120.6" user="" statuscode="200" cached="0" profile="REF_LFxaKhArSL (LDAP)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="631" request="0x14778968" url="master1.teamviewer.com/" exceptions="av,auth,content,url,ssl,certcheck,certdate,mime,cache,fileextension" error=""


If I create an exception with the PC's IP it works without any problems.

Can anyone help me?

Cheers,
Marc


This thread was automatically locked due to age.
Parents
  • 0
    Under Web filtering > Exceptions we have created the following new exception

    Teamviewer [Allow Teamviewer Access]
    Skipping: Authentication / Caching / Antivirus / Extension blocking / MIME type blocking / URL Filter / Content Removal / SSL scanning / Certificate Trust Check / Certificate Date Check
    Matching these URLs: ^https?://([A-Za-z0-9.-]*\.)?teamviewer\.com/


    Under firewall we have added a new rule called Teamviewer

    Internet > TCP Port (Source: 1:65535) to (Destination: 5938) > Any IP4
Reply
  • 0
    Under Web filtering > Exceptions we have created the following new exception

    Teamviewer [Allow Teamviewer Access]
    Skipping: Authentication / Caching / Antivirus / Extension blocking / MIME type blocking / URL Filter / Content Removal / SSL scanning / Certificate Trust Check / Certificate Date Check
    Matching these URLs: ^https?://([A-Za-z0-9.-]*\.)?teamviewer\.com/


    Under firewall we have added a new rule called Teamviewer

    Internet > TCP Port (Source: 1:65535) to (Destination: 5938) > Any IP4
Children
  • 0 in reply to stealthmatt_01
    Under Web filtering > Exceptions we have created the following new exception

    Teamviewer [Allow Teamviewer Access]
    Skipping: Authentication / Caching / Antivirus / Extension blocking / MIME type blocking / URL Filter / Content Removal / SSL scanning / Certificate Trust Check / Certificate Date Check
    Matching these URLs: ^https?://([A-Za-z0-9.-]*\.)?teamviewer\.com/


    Under firewall we have added a new rule called Teamviewer

    Internet > TCP Port (Source: 1:65535) to (Destination: 5938) > Any IP4


    I know this is an old thread, but I wanted to bump this as StealthMatt provides a great solution that seemed to be ignored by the posters in the thread.

    I can say his solution works like a champ.  I have many teamviewer clients.  Stock Sophos 9.2 with Web Protection on blocks teamviewer for me.  Matt's suggestions fix the problem.

    Greg