Intrusion Prevention
Reply
Super Contributor
ELKIM
Posts: 227
Registered: ‎12-01-2008
0

How to Block Teamviewer application

Dear all

 

anyone know how to block teamviewer application on JUniper IDP ?

 

I tried to block port 5938, it was unsuccesful, when i checked teamviewer is using port 80. soi think we should create custom attack object. i tried create that but still unsuccesful. anyone help me

 

 

Thanks

 

Elkim
Distinguished Expert
firewall72
Posts: 806
Registered: ‎05-04-2008
0

Re: How to Block Teamviewer application

Hi,

 

 I found a Team Viewer post below.  Have a look at the predefined attack "Info - SPYWARE:RAT:TEAMVIEW-HTTP-CLNT".  Let me know how you make out.

 

https://services.netscreen.com/restricted/sigupdates/nsm-updates/1090.html#7866

 

-John

John Judge
JNCIS-SEC, JNCIS-ENT, JNCIA-JUNOS, JNSS-Firewall

If this solves your problem, please mark this post as "Accepted Solution". Kudos are appreciated.
Super Contributor
ELKIM
Posts: 227
Registered: ‎12-01-2008
0

Re: How to Block Teamviewer application

hi ,

 

I already use that signature but useless

 

 

Thanks

Distinguished Expert
firewall72
Posts: 806
Registered: ‎05-04-2008
0

Re: How to Block Teamviewer application

Hi,

 

I think you may need to then capture the authentication packets and create a custom signature.  Either that or open up a ticket with JTAC.  They may be able to provide you with a sanity check on the predefined object and your policy.

 

-John

John Judge
JNCIS-SEC, JNCIS-ENT, JNCIA-JUNOS, JNSS-Firewall

If this solves your problem, please mark this post as "Accepted Solution". Kudos are appreciated.
Super Contributor
ELKIM
Posts: 227
Registered: ‎12-01-2008
0

Re: How to Block Teamviewer application

Yes, thanks for update., i already arise this issue to signature team and contact him to help create custom signature to block teamviewer application

 

 

thanks

 

Indra ELkim

Regular Visitor
ilyas.yildiz@yahoo.com
Posts: 7
Registered: ‎12-07-2010
0

Re: How to Block Teamviewer application

İcan do the solitions.

İS There any grafical solitions .

thansk

Best Regard,
___________________________
www.galatasaray.org
Juniper Employee
Autonym
Posts: 13
Registered: ‎12-01-2009
0

Re: How to Block Teamviewer application

The attack object "REMOTE-ACCESS:TEAMVIEWER-HTTP" was released June 17, 2010 and was tested to block the TeamViewer application at that time.

 

You might want to give that a try.

Regular Visitor
ilyas.yildiz@yahoo.com
Posts: 7
Registered: ‎12-07-2010
0

Re: How to Block Teamviewer application

Hi ,

Can you share the solitions ? I have to try the solitions on SSG320M

Best Regard,
___________________________
www.galatasaray.org
Visitor
AAUHK1
Posts: 8
Registered: ‎09-26-2009
0

Re: How to Block Teamviewer application

define custom  deep inspection

cs:teamviewer signature http:-url-parsed info /d(in|out)\.aspx

Visitor
junos_ar
Posts: 3
Registered: ‎07-15-2012
0

Re: How to Block Teamviewer application

Hi

 

I also using the custom signature but unable to block the team viewer connections.

Please help....

Copyright© 1999-2013 Juniper Networks, Inc. All rights reserved.