We are supported for most of our industrial machinery onsite, and were asked to open up ports etc. to allow external support to connect to machines. Looking over traffic via our third-party security console, we are seeing a ridiculous pingx.teamviewer.com, masterx.teamviewer.com hits, albeit these are blocked, segregated, vlan'd etc., what is going on in a 24 hour period that a handful of machines (<5) are requesting over the internet 200k times in a 24 hour period? settings need config? we need to turn something off?
As this traffic detail is flooding our activity logs, it is hard to see other important results for the 200k hit we are getting from a handful of teamviewer clients sitting waiting for connectivity, and obviously calling home 30+ times per minute?
Any thoughts, help, is appreciated.
thanks,
John.
