We using Intrushield 5.1.x with Latest Signature. It can block teamviiewer traffic on Windows but can not block teamviewer connection on Mac (on dashboard alert as Blocked but they can uses it) if you have any solution pls help.
Hello,
if the alert appears as blocked but the connection is still sucessfull then I would treat this as a false "true positive" detection..
You should collect the Evidence reports for this alert after enabling full logging and submit the files to McAfee Support for analysis.. It would also be helpfull if you can get a full network capture from the client device initiating the session so we can see the full conversation.
Regards,
David
Many thanks for your suggestion.
Corporate Headquarters
6220 America Center Drive
San Jose, CA 95002 USA