See also: Firewall. Session Security All sessions are secured using TLS1.2 with AEAD. The enforced encryption mode, client verification status, and fingerprint is to be found in the tooltip during the session. Security Features for the Client. The custom client provides a variety of configurable security settings. For details, see Customize AnyDesk. In Firebox - Subscription Services. We've started using Anydesk to monitor a server, which means there's a lot of idle time on the connection. When the client PC is behind a WatchGuard firewall, the connection is dropped after 10 minutes. This happens for client PCs on. I connect to my company computer via AnyDesk. I have set up a TCP tunnel from local port 11111 to remote port 22, to have an SSH connection to the remote machine. This stopped working since I installed Windows 10 2004 and WSL 2 on the client, a few days ago. NEXT-GEN FIREWALL. Firewall with synchronized security built in. MANAGED SERVICES. Managed Threat Response. 24/7 threat hunting, detection, and response. 2015 AnyDesk Software GmbH: Type: Remote management tool: Publisher URL: Anydesk.com: Download our free Virus Removal Tool - Find and remove threats your.
AnyDesk is a Remote Desktop solution which has become very popular in the last two years. It is overtaking TeamViewer in popularity because AnyDesk is currently a lot more generous with how much activity they allow on the free version. However, it is not always desirable to have remote access software such as AnyDesk running on your network. This article explains a number of measures to block AnyDesk from connecting out to the big wide world.
Ports used by AnyDesk
Like most hosted remote-access applications these days, AnyDesk connects out on ports TCP 80, TCP 443, and also one unique port – TCP 6568.
Internally, it uses UDP ports 50001-50003 for multicasting to allow discovery on your local network.
No special outbound rules or port forwarding are required to make AnyDesk work – so long as your network administrator hasn’t followed the below instructions to make life difficult for AnyDesk.
How to Block AnyDesk On Your Network
If you want to block AnyDesk on your network, there are a few measures you can put in place:
- Create local firewall rules using Windows Firewall to block outgoing connections from AnyDesk.exe
- Block the resolution of DNS records on the anydesk.com domain. If you run your own DNS server (such as an Active Directory server) then this is easy:
- Open your DNS Management Console
- Create a top-level record for ‘anydesk.com‘
- Do nothing else. By pointing this record nowhere you will stop connections to this domain and all of it’s subdomains
- Block anydesk.com in PiHole – this is another way to use DNS blocking to stop AnyDesk from connecting out via your network
- Ensure the only DNS connections allowed on your network are to your own internal DNS servers (which contain the above dummy-record). This removes the possibility of the AnyDesk client checking DNS records against their own servers, instead of yours. To do so, add a new outgoing firewall rule to disallow TCP & UDP port 53 from all source IP addresses, EXCEPT the addresses of your own DNS servers.
- You can utilise Group Policy to deny AnyDesk.exe from running. To do this, create a new Software Restriction Policy with a Hash Rule for AnyDesk.exe.
- If you have a firewall with Deep Packet Exception, you can enable the in-built rules to block AnyDesk. These firewalls often release new definition updates as the situation changes, so a lot of the hard work is handled for you.
- Block outgoing TCP Port 6568. You can create a DENY rule in your firewall to do this.
AnyDesk does not have any fixed IP addresses – they simply use IPs from cloud providers, and do not publish a list, so blocking IPs will be a game of whack-a-mole. However, these above seven steps should allow you to be successful in blocking AnyDesk from connecting out to the internet.
Security is our priority
AnyDesk uses TLS 1.2 based encryption, which is also used in online banking. Both ends of a connection are cryptographically verified. This makes it impossible for a stranger to fake your AnyDesk-ID and pretend to be you. So, if you always check the connecting person’s AnyDesk-ID, you’re on the safe side. Furthermore, you can review the current encryption mode, verification status and client fingerprint by hovering the mouse cursor over the lock icon in the status bar. All connections use AES-128 bit encryption in GCM mode by default. Licensed versions of AnyDesk provide even stronger encryption.
Picking a safe password
If you setup unattended access via AnyDesk, you need to pick a Password for the computer. AnyDesk requires a minimum password length, but does not restrict your password in other ways. For example, you don’t need to mix upper and lower case letters, numbers and special characters. Adding more different characters to your password doesn’t improve security very much, but it makes your password hard to remember. The result is less security, because users tend to write it on a sticky note next to their computer, reusing passwords, etc. Instead, you can just pick a long password – maybe a sentence with some words, that are deliberately misspelled.
This web comic explains the maths behind password security very well:
https://xkcd.com/936/
https://www.youtube.com/watch?v=yzGzB-yYKcc
Introducing our new feature: Access Control
To start a session, you need the computer’s AnyDesk address. The request must then be confirmed by the computer user before the session is established. The whitelist sets out exactly who is authorised to access your computer. If the whitelist is active, only a pre-defined group of people will be able to connect. This ensures that nobody who isn’t authorised to do so can start a session. The whitelist could contain all the computers in your IT department, for example. Or perhaps just your own personal laptop, so that requests can only be made from there.
Anydesk Firewall Ports
Please keep in mind that we are planning to bring you more security features that will allow you more detailed control on who can access which computer.
AnyDesk 3.0 is now available for download at https://anydesk.com/download . This version is currently only available for Windows PCs (Windows XP or higher). MAC and Linux versions will follow.
If you would like to request a free Professional trial, please write us an e-mail at sales@anydesk.com