I think there is a problem with the deep inspection and the relay servers they are using. If I remove the deep inspection on my computer, the software is working.īut as soon that I enable it, I got a ssl_14090086 error in the bottom of the software. The Internet service available in the list is only for the website I cant even create a Deep Inspection exception for *. Verifyca: 1, invalid_cert_action: 2, untrust_ca_action: 4, whitelist: 0

I am also searching regarding troubleshooting of deep packet inspection and I found this thread Īfter running this command ' diagnose ips debug enable ssl', the dubug output showsĬreate_run_mode: SSL CA name: Fortinet_CA_SSL, untrust CA name: Fortinet_CA_Untrusted, VDOM: 0, enable: 1, mode: 2,

I have to use deep packet inspection to block facebook comments, likes, and file uploads. I also created custom deep packet inspection profile and add AnyDesk FQDN on the exemption list but no luck. When I try to change the inspection mode to SSL Certificate, the AnyDesk shows no error.

I have applied deep packet inspection in the firewall policy but AnyDesk application shows SSL error. I am thinking of somehow completly blocking INBOUND traffic to these applications via Zscaler/-Z-App, but I fear this is no easy task as AnyDesk/TV are basically working like ZIA/ZPA where only outbound connections are initiated and both ends are interconnected.Īnother idea (for the time being my favorite) would be to completely block installation of that stuff on our client-machines and implement some kind of isolated “jumpserver/bastion”-host from where this connections are made.Īny experience/recommendations/advise would be helpful so i don’t have to invent the wheel twice.Please help me regarding this. Especially the default enabled “features” of AnyDesk are - to put it positively - quite comprehensive. Does anyone have experience and/or best practice recommendations how to secure this kind of remote management software with Zscaler (besides of application settings like MFA, turning on/off particular security settings etc). For a customer project we need to implement/allow AnyDesk/Teamviewer for some of our employees.

What is anydesk firewall