TeamViewer principles and blocking methods

TeamViewer is a simple and useful remote tool. It is a simple and fast solution for remote control, desktop sharing and file transfer in the background of any firewall and Nat proxy. To connect to another computer, you only need to run TeamViewer on both computers without installing one. The software automatically generates a partner ID on two computers when it is started for the first time. You only need to enter the ID of your partner to TeamViewer, and then the connection will be established immediately.

The working principle of TeamViewer is actually very simple. Assume that the two sites A and B need to log on to a, then the TeamViewer software on a must first run, generate a unique ID based on your host and log on to the official website. The official website records the information of Site A based on this ID, and then runs the TeamViewer software on Site B. Enter the ID number of Site A and log on to the official website. The official website matches the ID with site, then a direct channel from B to a is established. In this way, Site A is visible to site B.

Of course, as an enterprise information network maintainer, TeamViewer is a good thing, but it also has some security risks. Many Trojans are actually remote control of personal PCs, modification or theft of private data. In this regard, apart from concealment, there is no difference between Trojan Horse and TeamViewer. In addition, since a VPN channel needs to be established through a third party (the official TeamViewer website), you must fully trust the official website, if someone maliciously attacks the official website, you can obtain information about the enterprise's internal PC that communicates with it, and you can use this information to launch attacks. Therefore, it is necessary for mature enterprises to block such gadgets.

The method is very simple, because TeamViewer needs to communicate with the server (Official Website) during login, so as long as the official website is disabled at the exit (proxy or firewall), TeamViewer can log on to master.dyngate.com, as long as this URL is disabled, TeamViewer cannot be used.