[經驗] 網管人員如何管理「Teamviewer」這個連線利器_part 2 !!

owever, there are 2 options to unblock TeamViewer:

1. General unlocking of Port 5938 TCP for outgoing connections. (recommended)

Port 5938 is only used by a few programs and therefore is no security risk. This traffic should then neither be filtered nor cached.

2. Unlocking of URLs of the following formats (to any Server)

GET /din.aspx?s=…&client=DynGate…
GET /dout.aspx?s=…&client=DynGate…
POST /dout.aspx?s=…&client=DynGate…

Independent from the chosen method:
Please also check that no content filter or similar is blocking one of the following URLs:
*.teamviewer.com
*.dyngate.com

If you have any further questions please do not hesitate to contact us.

======================================================
Teamviewer實在是很強大的軟體… 幾乎可說是無孔不入…

上述的原廠所回覆的內容簡單來說，網路管理人員如果想要有效的Block TeamViewer，不妨在防火牆加入下列設定！
1. block TCP 5938
2. block *.teamviewer.com
            *.dyngate.com


這樣一來，應該可以有效的阻擋 User 在公司影響資安的行為

哇真的太專業了啊