Blog Home  Home Feed your aggregator (RSS 2.0)  
IMFirewall Blog - How to block VNC traffic of network computers with WFilter?
WFilter -- monitor, filter and block internet activities of network client devices.
 
# Monday, April 02, 2012

VNC® provides secure remote access computers from any location for your home and organization. RFB is the protocol used in VNC and its derivatives.

This tutorial will guide you to block VNC with "WFilter Enterprise 4.0". Because blocking of VNC is not supported by default in WFilter, in this example, we uses "Customize Protocols" feature of WFilter to define the VNC protocol.

First, Add "VNC" Protocol in "Customize Protocols".

In "Customize Protocols", new a protocol named "vnc".


VNC has a pattern:
"vnc_tcp":
Type--"TCP ALL"
Format--"0"
Pattern Content--"^\x52\x46\x42\x20\x30\x30"

Second, Enable blocking of VNC in certain blocking levels.

And apply this blocking policy to certain computers.

Now, VNC will be blocked.

WFilter blocking events:

Failure connection of VNC.

Monday, April 02, 2012 8:01:30 AM (GMT Daylight Time, UTC+01:00)     |  WFilter deployment with RouterOS's port streaming feature.  |  When shall you use two network cards for monitoring and bloc...
Copyright © 2014 IMFirewall Software. All rights reserved.

Pick a theme: