I cant Block Anydesk from EndPoint Secure Application Blacklists

Newbie623929 Lv1Posted 29 Jun 2024 06:42

Last edited by Lalzuru 29 Jun 2024 13:47.

Dear, I have been trying to block the AnyDesk application from the Application Blacklists module in every possible way and I have not been able to. I wanted to ask here if there is a way to block this application from Application Blacklists.

Thanks

Farina Ahmed has solved this question and earned 10 coins.

Posting a reply earns you 2 coins. An accepted reply earns you 20 coins and another 10 coins for replying within 10 minutes. (Expired) What is Coin?

Enter your mobile phone number and company name for better service. Go

To block the AnyDesk application using the Application Blacklists module, you should ensure that the executable file (usually named AnyDesk.exe) and its related processes are identified and added to the blacklist. You might need to specify the application's signature or its unique identifiers if the module supports these options. If standard methods fail, consider using advanced options such as blocking the application's network access or using third-party endpoint protection tools to enforce the block.
Is this answer helpful?
Prosi Lv3Posted 01 Jul 2024 10:21
  
Hi,

Blocking AnyDesk or any other application from running on endpoints typically involves using endpoint security solutions that support application control or blacklisting capabilities.

Access Management Console: Log in to the management console of your endpoint security solution with administrative privileges.

Locate the option to add applications to a blacklist or blocklist.
Add AnyDesk to this list by specifying its executable file path or using its unique identifier (if supported by the endpoint security software).
vesogi7900 Lv2Posted 01 Jul 2024 12:34
  
Blocking AnyDesk using Sangfor Endpoint Secure can be a bit tricky, but here are some steps you can follow to ensure it’s properly blocked:

1. Application Control: Ensure that the application control feature is enabled. You can create a policy specifically to block AnyDesk by selecting it from the application database.
2. Port Blocking: AnyDesk uses several ports, including TCP 80, TCP 443, and TCP 6568. Blocking these ports can help prevent AnyDesk from establishing connections.
3. NGAF Configuration: If you’re using Sangfor NGAF, you can configure a rule to block AnyDesk. This involves specifying the AnyDesk application in the NGAF settings and setting it to block.
4. Endpoint Secure Integration: Make sure that Endpoint Secure is properly integrated with NGAF or IAG. This allows the endpoint to send information about running applications to NGAF, where you can create containment policies to block specific applications.

If these steps don’t resolve the issue, it might be helpful to check for any updates or patches for your Sangfor software, as there could be improvements or bug fixes related to application blocking.
Enrico Vanzetto Lv4Posted 01 Jul 2024 19:16
  
Hi, as far as i know, this is possible only if you correlate sangfor es with ngaf and built an application control policy to block this specific application. This works only on clients that are connected to a network with ngaf  as firewall of course.
ilham Lv1Posted 02 Jul 2024 12:04
  
Hello,

you can reomve the Anydesk from the application blacklist policies.

go to Policies > App Control > Application Blacklist, search the policy thath include Anydesk inside it and then remove from the policy

hope this help
Farina Ahmed Lv5Posted 02 Jul 2024 13:39
  
To block the AnyDesk application using the Application Blacklists module, you should ensure that the executable file (usually named AnyDesk.exe) and its related processes are identified and added to the blacklist. You might need to specify the application's signature or its unique identifiers if the module supports these options. If standard methods fail, consider using advanced options such as blocking the application's network access or using third-party endpoint protection tools to enforce the block.
mdamores Lv3Posted 02 Jul 2024 14:14
  
Hi,

If you are using Sangfor NGAF, you may follow these steps

- Configure a Rule in Sangfor NGAF:
      - Specify the AnyDesk application in the rule.
      - Set the rule action to “block” for AnyDesk1.
- Block Ports:
      - AnyDesk uses these specific ports for communication.
         - TCP 80
         - TCP 443
         - TCP 6568 (unique port)
         - UDP ports 50001-50003 (for multicasting on the local network)
pmateus Lv2Posted 02 Jul 2024 16:38
  
Hi,

You can block ports used by anydesk or block the application name on application blacklists.
Zonger Lv5Posted 02 Jul 2024 18:17
  
To block the AnyDesk application using the Application Blacklists module, you can try adding the exact path of the executable file to the blacklist. The default path for AnyDesk is usually `C:\Program Files\AnyDesk\AnyDesk.exe`. However, if you're still having trouble, try adding the following settings: * Add a new rule with the "Pattern" set to `anydesk.exe` and the "Path" set to `C:\Program Files\AnyDesk\*` (note the wildcard at the end). * Alternatively, you can also specify the full path `C:\Program Files\AnyDesk\AnyDesk.exe` in the "Path" field. Make sure to save the changes after adding the rule and restart the VMware vCenter Server services for the changes to take effect.
Newbie290036 Lv4Posted 02 Jul 2024 19:19
  
To effectively block the AnyDesk application using the Application Blacklists module, ensure that you are correctly identifying the application executable or process name associated with AnyDesk. Typically, you need to specify the exact name or path of the executable file used by AnyDesk in the blacklist configuration. If AnyDesk continues to evade detection or blocking, consider checking if it's using a different executable name or if it's installed in a non-standard directory. Adjust your blacklist rules accordingly to cover all potential variations of AnyDesk's executable names or paths. Additionally, ensure that your firewall or endpoint security solution is updated with the latest application definitions to accurately detect and block AnyDesk.

I Can Help:

Change

Moderator on This Board

3
10
3

Started Topics

Followers

Follow

43
2
2

Started Topics

Followers

Follow

1
2
5

Started Topics

Followers

Follow

7
11
4

Started Topics

Followers

Follow

18
8
0

Started Topics

Followers

Follow

Trending Topics

Board Leaders