How to block Teamviewer in ASA Firewall?

csco11049253 · ‎04-22-2009

As my question states, we want to block Teamviewer in our network. Our setup is as mentioned below..

only one proxy server is allowed access to the Internet, the IP of this proxy is PATed on the firewall.

We are looking for an access-list statement to block the teamviewer.

Thanks & Regards,

CM

maratkinson · ‎04-22-2009

Teamviewer is not a point to point remote access tool, as such it requires all the clients to connect to the teamviewer.com management servers. As a result, this allows you to create ACL DROP rules agaist the known IP's that they use to do this session management.

DNS lookup places teamviewer IP space in 190.198.81.0, 87.230.73.0 & 88.198.141.0, If you know that you do no business with Germany, then you could Drop at the FW requests against the entire counrty range of 87.230.0.0 to 87.230.127.255

The best way to know what IP's your going after would be to signup for the free trial and capture all the IP's you see yourself hitting the Teamviewer.com headend servers on.