TeamViewer je aplikacija za online sastanke, web konferencije, dijeljenje datoteka i desktopa preko računala. TeamViewer je poznat uglavnom po svojoj značajci dijeljenja daljinskog upravljača . ^{(Remote Control)}To korisnicima omogućuje daljinski pristup preko drugih računala. Dva korisnika mogu pristupiti međusobnom računalu sa svim kontrolama.

Ova aplikacija za udaljenu administraciju i konferenciju dostupna je za gotovo sve operacijske sustave, tj. Windows , iOS, Linux , Blackberry , itd. Glavni fokus ove aplikacije je pristup i dodjela kontrola nad tuđim računalima. Uključene su i značajke prezentacije i konferencije.

Kako se TeamViewer igra s online kontrolama nad računalima, mogli biste sumnjati u njegove sigurnosne značajke. Pa^(Well) bez brige, TeamViewer dolazi s 2048-bitnom RSA enkripcijom, s razmjenom ključeva i dvofaktorskom autentifikacijom. Također provodi opciju resetiranja lozinke ako se otkrije bilo kakva neobična prijava ili pristup.

Kako blokirati TeamViewer na vašoj mreži

Kako blokirati TeamViewer na vašoj mreži^{(How to Block TeamViewer on your Network)}

Ipak, možda ćete nekako htjeti blokirati ovu aplikaciju iz svoje mreže. U ovom članku ćemo vam objasniti kako to učiniti. Pa, stvar je u tome da TeamViewer ne zahtijeva nikakvu konfiguraciju ili bilo koji drugi vatrozid za povezivanje dvaju računala. S web-mjesta trebate samo preuzeti .exe datoteku. To čini postavljanje ove aplikacije vrlo jednostavnom. Sada s ovom jednostavnom instalacijom i pristupom, kako biste blokirali TeamViewer na svojoj mreži?

Bilo je mnogo opsežnih optužbi da su korisnici TeamViewera^(TeamViewer) hakirali svoje sustave. Hakeri i kriminalci^(Criminals) dobivaju nezakonit pristup.

Prođimo sada kroz korake za blokiranje TeamViewer -a :

#1. DNS Block

Prije^(First) svega, morat ćete blokirati razlučivost DNS zapisa iz domene TeamViewer -a , tj. teamviewer.com. Sada, ako koristite svoj vlastiti DNS poslužitelj, baš kao i Active Directory poslužitelj, to bi vam bilo lako.

Slijedite korake za to:

1. Prvo^(First) morate otvoriti konzolu za upravljanje DNS -om.^(DNS)

2. Sada ćete morati stvoriti svoj vlastiti zapis najviše razine za domenu TeamViewer ( teamviewer.com).

Sada, ne morate ništa učiniti. Ostavite novi zapis kakav jest. Ne usmjeravajući ovaj zapis nigdje, automatski ćete prekinuti svoje mrežne veze s ovom novom domenom.

#2. Ensure Clients Connection

U ovom koraku morate provjeriti ne mogu li se klijenti povezati s vanjskim DNS poslužiteljima. Morat ćete osigurati da svojim internim DNS poslužiteljima; samo DNS veze imaju pristup. Vaši interni DNS poslužitelji sadrže lažni zapis koji smo kreirali. To nam pomaže ukloniti malu mogućnost klijentske provjere DNS zapisa TeamViewera^(TeamViewer) . Umjesto vašeg poslužitelja, ova provjera klijenta je samo prema njihovim poslužiteljima.

Slijedite korake kako biste osigurali vezu s klijentom:

1. Prvi korak je prijava na vatrozid^(Firewall) ili vaš usmjerivač.

2. Sada morate dodati pravilo odlaznog vatrozida. Ovo novo pravilo će onemogućiti port 53 TCP-a i UDP-a^{(disallow port 53 of TCP and UDP)} iz svih izvora IP adresa. Dopušta samo IP adrese vašeg DNS poslužitelja.

To omogućuje klijentima samo rješavanje zapisa koje ste ovlastili putem vašeg DNS poslužitelja. Sada ovi ovlašteni poslužitelji mogu proslijediti zahtjev drugim vanjskim poslužiteljima.

#3. Block access to IP Address Range

Sada kada ste blokirali DNS zapis, možda će vam olakšati što su veze blokirane. Ali pomoglo bi da niste, jer ponekad, unatoč tome što je DNS blokiran, TeamViewer će se i dalje povezivati na svoje poznate adrese.

Sada postoje načini za prevladavanje ovog problema. Ovdje ćete morati blokirati pristup rasponu IP adresa.

1. Prije^(First) svega, prijavite se na svoj usmjerivač^(Router) .

2. Sada ćete morati dodati novo pravilo za Vatrozid^(Firewall) . Ovo novo pravilo vatrozida će onemogućiti usmjerene veze na 178.77.120.0./24

Raspon IP adresa za TeamViewer je 178.77.120.0/24. Ovo je sada prevedeno na 178.77.120.1 – 178.77.120.254.

#4. Block the TeamViewer Port

Ovaj korak nećemo nazvati obveznim, ali bolje je sigurno nego žaliti. Djeluje kao dodatni sloj zaštite. TeamViewer se često povezuje na port broj 5938 i također tunelira kroz port broj 80 i 443, odnosno HTTP i SSL .

Ovaj port možete blokirati slijedeći dane korake:

1. Prvo^(First) se prijavite na vatrozid^(Firewall) ili svoj usmjerivač.

2. Sada ćete morati dodati novi vatrozid, baš kao i zadnji korak. Ovo novo pravilo će onemogućiti port 5938 TCP -a i UDP -a s izvornih adresa.

#5. Group Policy Restrictions

Sada morate razmotriti uključivanje softverskih ograničenja grupnih pravila^{(Group Policy Software Restrictions)} . Slijedite^(Follow) korake da to učinite:

Prvi korak je preuzimanje .exe datoteke s web stranice TeamViewer .
Pokrenite aplikaciju i otvorite konzolu za upravljanje pravilima grupe . ^{(Group Policy Management)}Sada morate postaviti novi GPO .
Sada kada ste postavili novi GPO idite na Korisnička konfiguracija^{(User Configuration)} . Pomaknite^(Scroll) se do Postavke prozora^{(Window Settings)} i unesite Sigurnosne postavke^{(Security Settings)} .
Sada idite na Pravila registracije softvera^{(Software Registration Policies)} .
Pojavit će se novi skočni prozor Hash Rule . Kliknite^(Click) na 'Pregledaj' i potražite postavku TeamViewera^(TeamViewer) .
Nakon što pronađete .exe datoteku, otvorite je.
Sada morate zatvoriti sve prozore. Posljednji korak sada je povezivanje novog GPO -a s vašom domenom i odabir "Primijeni na sve".

#6. Packet Inspection

Razgovarajmo sada o tome kada se svi gore spomenuti koraci ne izvode. Ako se to dogodi, morat ćete implementirati novi vatrozid koji može obavljati duboke inspekcije paketa i UTM^{(Deep Packet Inspections and UTM)} (Unified Threat Management ). Ovi specifični uređaji pretražuju uobičajene alate za daljinski pristup i blokiraju im pristup.

Jedini nedostatak ovoga je novac^(Money) . Za kupnju ovog uređaja morat ćete potrošiti mnogo novca.

Jedna stvar koju trebate imati na umu je da imate pravo blokirati TeamViewer , a korisnici s druge strane svjesni su pravila protiv takvog pristupa. Preporuča se imati napisana pravila kao rezervnu kopiju.

Preporučeno: ^{(Recommended:)} Kako preuzeti videozapise s Discorda^{(How to Download Videos from Discord)}

Sada možete jednostavno blokirati TeamViewer na svojoj mreži slijedeći gore navedene korake. Ovi koraci će zaštititi vaše računalo od drugih korisnika koji pokušavaju preuzeti kontrolu nad vašim sustavom. Preporuča se implementirati slična ograničenja paketa na druge aplikacije za daljinski pristup. Nikada niste previše spremni kada je sigurnost^(Security) u pitanju , zar ne?

How to Block TeamViewer on your Network

TeamViewer is an applicatіon for online meetings, web conferences, file & desktop sharing over computers. TeamViewer is famous mostly for its Remote Сontrol sharing feature. This allows users to get remote accesѕ over оther computer screens. Two users can access each other’s computer with all controls.

This remote administration and conferencing application are available for almost all operating systems, i.e., Windows, iOS, Linux, Blackberry, etc. The main focus of this application is accessing and granting controls of others’ computers. The presentation and conferencing features are also included.

As TeamViewer plays with online controls over computers, you might doubt its security features. Well no worries, TeamViewer comes with 2048-bit RSA based encryption, with key exchange and two-factor authentication. It also enforces password reset option if any unusual login or access is detected.

Still, you may somehow want to block this application from your network. In this article, we will explain to you how to do so. Well, the thing is TeamViewer does not require any configuration or any other firewall to connect two computers. You only need to download the .exe file from the website. This makes the set up for this application very easy. Now with this easy installation and access, how would you block TeamViewer on your network?

There were a lot of high volume allegations about TeamViewer users getting their systems hacked. Hackers and Criminals get illegal access.

Let us now get through the steps to block TeamViewer:

#1. DNS Block

First of all, you will need to block the DNS records resolution from the domain of TeamViewer, i.e., teamviewer.com. Now, if you are using your own DNS server, just like the Active Directory server, then this would be easy for you.

Follow the steps for this:

1. First, you need to open the DNS management console.

2. You will now need to create your own top-level record for the TeamViewer domain (teamviewer.com).

Now, you don’t have to do anything. Leave the new record as it is. By not pointing this record anywhere, you will automatically stop your network connections to this new domain.

#2. Ensure Clients Connection

In this step, you need to check if the clients can’t connect to the external DNS servers. You will need to ensure that to your internal DNS servers; only DNS connections are granted access. Your internal DNS servers contain the dummy record we created. This helps us remove the slight possibility of client checking DNS record of TeamViewer. Instead of your server, this client check is only against their servers.

Follow the steps to ensure Client connection:

1. The first step is to log in to the Firewall or your Router.

2. Now you need to add an outgoing firewall rule. This new rule will disallow port 53 of TCP and UDP from all the sources of IP addresses. It only allows the IP addresses of your DNS server.

This allows the clients only to resolve the records that you have authorised through your DNS server. Now, these authorised servers can forward the request to other external servers.

#3. Block access to IP Address Range

Now that you have blocked the DNS record, you may get relieved that connections have been blocked. But it would help if you weren’t, because sometimes, despite the DNS being blocked, the TeamViewer will still connect to its known addresses.

Now, there are ways to overcome this problem too. Here, you will need to block access to the IP address range.

1. First of all, login to your Router.

2. You will now need to add a new rule for your Firewall. This new firewall rule will disallow the directed connections to 178.77.120.0./24

The IP address range for TeamViewer is 178.77.120.0/24. This now is translated to 178.77.120.1 – 178.77.120.254.

#4. Block the TeamViewer Port

We won’t call this step as mandatory, but it is better safe than sorry. It acts as an extra layer of protection. The TeamViewer often connects on the port number 5938 and also tunnels through the port number 80 and 443, i.e., HTTP & SSL respectively.

You can block this port by following the given steps:

1. First, log in to the Firewall or your Router.

2. Now, you will need to add a new firewall, just like the last step. This new rule will disallow the port 5938 of TCP and UDP from the source addresses.

#5. Group Policy Restrictions

Now, you must consider including Group Policy Software Restrictions. Follow the steps to do it:

The first step is to download the .exe file from the TeamViewer website.
Launch the app and open the Group Policy Management console. Now you need to set up a new GPO.
Now that you have set up a new GPO go to User Configuration. Scroll for Window Settings and enter Security Settings.
Now go to the Software Registration Policies.
A new Hash Rule pop-up window will appear. Click on ‘Browse’ and search for the TeamViewer setup.
Once you’ve found the .exe file, open it.
Now you need to close all windows. The final step now is to link the new GPO to your domain and select ‘Apply to Everyone’.

#6. Packet Inspection

Let us now talk about when all of the above-mentioned steps fail to perform. If this happens, you will require to implement a new firewall which can perform Deep Packet Inspections and UTM (Unified Threat Management). These specific devices search the common remote access tools and block their access.

The only downside of this is Money. You will need to spend a lot of money to buy this device.

One thing that you need to keep in mind is that you are eligible to block the TeamViewer and the users at the other end are aware of the policy against such access. It is advised to have written policies as a backup.

Recommended: How to Download Videos from Discord

You can now easily block TeamViewer on your network by following the above-mentioned steps. These steps will protect your computer from other users who try to gain control over your system. It is advised to implement similar packet restrictions to other remote access applications. You are never too prepared when it comes to Security, are you?

Aleksandar Vinković

About the author

Ja sam profesionalni recenzent za Windows i uredski softver. Dobro poznajem te programe, kao i njihove različite značajke i mogućnosti. Moje recenzije su objektivne i detaljne, tako da potencijalni kupci mogu vidjeti koliko dobro program radi i koja se poboljšanja mogu učiniti. Također volim pomagati ljudima da pronađu najbolje aplikacije za svoje potrebe - bilo da je to putem recenzija ili pronalaženjem najboljih ponuda za aplikacije.

Kako blokirati TeamViewer na vašoj mreži

Kako blokirati TeamViewer na vašoj mreži^{(How to Block TeamViewer on your Network)}

#1. DNS Block

#2. Ensure Clients Connection

#3. Block access to IP Address Range

#4. Block the TeamViewer Port

#5. Group Policy Restrictions

#6. Packet Inspection

How to Block TeamViewer on your Network