How can I block Anydesk application using Application Control feature in Sonicwall

This article shows how to configure the App control feature to block Anydesk Application.

Resolution for SonicOS 7.X

This release includes significant user interface changes and many new features that are different from the SonicOS 6.5 and earlier firmware. The below resolution is for customers using SonicOS 7.X firmware.

Login to the SonicWall management GUI.

1. Click Policy in the top navigation menu.
2. Navigate to the Security Services |App Control page.
3. Check the box under Enable App Control and Enable Logging for all apps |Click Accept button at the bottom to enable App Control.
4. Under Signatures | View Style select REMOTE-ACCESS under Category.
5. From the drop-down under Application, select Anydesk Remote Desktop | From the drop-down under Viewed by, select Application.
6. Click Configure button |
7. You will see a Warning Message: Application's Block setting is the same as the Category to which it belongs. Your exception may not work as desired. Please double-check and update your application's Block settings.Click on OK if you are sure that, you have not configured the same on Category Block.
8. Select Enable under Block and Log.
9. Click OK.

Enabling Application Control on zones

1. Click Object in the top navigation menu.
2. Navigate to Match Objects| Zones.
3. Click Configure button under the zone where you want App Control enabled.
4. Check Enable App Control Service.
5. Click OK.

Resolution for SonicOS 6.5

This release includes significant user interface changes and many new features that are different from the SonicOS 6.2 and earlier firmware. The below resolution is for customers using SonicOS 6.5 firmware.

Login to the SonicWall management GUI.

1. Click Manage in the top navigation menu.
2. Navigate to the Rules | App Control page.
3. Check the box under Enable App Control and Enable Logging for all apps.
4. Click Accept button at the bottom to enable App Control.
5. Under App Control | View Style select REMOTE-ACCESS under Category. 
6. From the drop-down under Application, select Anydesk Remote Desktop.
7. From the drop-down under Viewed by, select Application.
8. You will see a Warning Message: Application's Block setting is the same as the Category to which it belongs. Your exception may not work as desired. Please double-check and update your application's Block settings.Click on OK if you are sure that, you have not configured the same on Category Block.
9. Select Enable under Block and Log
10. Click OK .

Enabling Application Control on zones

1. Click Manage in the top navigation menu.
2. Navigate to Network | Zones.
3. Click Configure button under the zone where you want App Control enabled.
4. Check Enable App Control Service.
5. Click OK .

Alternatively, if Anydesk is not getting blocked under App control, try blocking it using the Access Rules.

Creating the necessary Service Objects.

1. Click Object in the top navigation menu
2. Click the Match objects | Service.
3. Click the Add button and create the Service Object for the ports TCP and UDP 6568.
4. Click Save to add the Service Object to the SonicWall's Service Object Table.
5. Add the service objects in Service group as shown below.

Creating the necessary Firewall Access Rule.

1. Click Policy in the top navigation menu.
2. Click Rules and policies | Access rules.
3. Select the View Type as Matrix and select your Appropriate Zone Access Rule to WAN.
4. Click the Add button at the botton of the screen and in the pop-up window create the Access Rule by configuring the field as shown below in the Source/Destination tab. Leave all the other tabs as default.
5. Click Add when finished.