2
I'm having a few difficulties setting up my office computers. I am trying to block all programs from accessing the internet, with a few exceptions:
1) Web browsers should be able to access only a couple of websites.
2) TeamViewer should work properly.
I tried setting the default for outbound rules to block all the connections and after that I added "allow" rules for TeamViewer and for the browsers to be able to access certain websites (added websites IP's using a custom rule).
However, the "Allow" rules do not seem to work, giving me no access to the internet at all. What seems to be the problem here?
EDIT: I'd love to know why does allowing program, such as a TeamViewer the standard way (Add outbound rule => Rule for a program => select the program path) does not provide access for the program to the internet, but adding a custom rule with unblocking TCP/UDP port for it does work. Theres should be no difference?
This solution is not suitable for me because it only configures Internet Explorer browser. Besides, denying an IP adress instead of a domain does not seem to be a problem for me. – Aurimas – 2017-09-18T05:43:35.290
@aurimas The main point is that you should create two allow rules - one for teamviewer and one for http. – Vojtěch Dohnal – 2017-09-18T08:51:37.253
@Vojtech Already did that, but it doesn't seem to work properly. Please read the edit section, help is much appreciated. – Aurimas – 2017-09-18T09:48:30.687
@Vojtech, How would one know what else an application requires to function properly over the network, besides allowing the standard "*.exe" of the program? Provided from your answer, TW also needs allowed svchost process. Besides that, Your answer is sufficient, thank you. – Aurimas – 2017-09-19T17:45:50.600