How to block anydesk or non cisco vpn services?

[AlanLee]

How to block anydesk or non cisco vpn services?

[alemabrahao]

The most effective way I see to block the application is via the Machine's Firewall.

If you have Trellix or any other corporate firewall that users do not have access to, you can block the application without any difficulty.

I hope I have helped you.

[DarrenOC]

As already eluded to - on the endpoint itself via something like MS Defender 

[PhilipDAth]

I have not tested it, but I bet if you block all access to their DNS domains, you might have a shot.

*.net.anydesk.com

*.anydesk.com

With anyluck, this will prevent the agents from being able to "login".

[alemabrahao]

I've tested it and it isn't effective.

[PhilipDAth]

The next thing I would try is to do a packet capture of port 53 and then start it up, and see if it touches any other DNS entries.

Also, watch out for it using hard-coded DNS servers.  I think it can use 1.1.1.1 and 8.8.8.8 if the normal DNS resolver does not work.  Access for clients to external DNS servers might need to be blocked.

[alemabrahao]

The most effective way is blocking via the machine firewall.

[JamesT91]

What if you're not in control of the endpoint and want to block any unauthorised AnyDesk usage on your network?

[alemabrahao]

So you need something like Zscaler; MX by itself can't handle it.

[PhilipDAth]

Keep it in the family.  🙂

Cisco Umbrella could do it.

[cmr]

Use Cloudflare Zero Trust.  It reliably breaks AnyDesk regardless of configuration 😉