Anydesk issue.

[AzerbaijanSupermarkets]

Hi everyone!
I have some issues with anydesk application. It has ssl issue because of decryption, I think.

I've added *.anydesk.com ind 'SSL decryption exclusion', but it didn't worked.

Maybe some of you have faced such kind of issue?

Thanks in advance!

[Mick_Ball]

Sorry never used it but your url *.anydesk.com will only cover www.anydesk.com or uk.anydesk.com.

try adding both...

*.anydesk.com and anydesk.com

[AzerbaijanSupermarkets]

Nope, it didn't help. Thank you.

[Mick_Ball]

Ok so turn off decrypt for your ip address and check the urls its using. It may be also .en.com or any other url that you are not aware of. 

See if it recocnised as an app.

[AzerbaijanSupermarkets]

Hi!
I made as you adviced, but this didn't work also.

[Pollux]

Hi all

I'm having the same issue. Did anyone resolve it?

To get it to work i have to stop decryption for everyting.

[BPry]

@Pollux,

Build out a 'No-Decrypt' decryption policy with a custom URL. In that custom URL category include the Anydesk URLs as you're seeing in the logs. The traffic would then not be decrypted by the firewall and everything should function correctly. 

[Pollux]

Thanks. Tried that with no result.

*.anydesk.com/*

*.net.anydesk.com/

and any possible compination. 

[BPry]

@Pollux,

Is that the URL that the firewall is actually recording though. Don't trust what you're seeing in your browser, look at what the firewall is recording in the URL Filtering logs with a test policy where all the categories are set to 'alert'. 

[AzerbaijanSupermarkets]

I tried may combinations, which were logged in URL filtering, but nothing worked.

So I just added private-ip-address to no-decrypt policy.

[Pollux]

Hi

You mean insdide ip address? but how did you manage to avoid decryption for olny anydesk sides?

[AzerbaijanSupermarkets]

Hi,

I avoid decryption for whole <private-ip-addr> category, as I could't make it only for anydesk. As I said earlier I tried many combinations.

[UNAPEC]

Any update??? still not working for me.

Paloalto has predefined "SSL Descryption Exclusion" for "AnyNet Relay" and "AnyDesk Client" and I manually add "AnyNet Root CA" "*.net.anydesk.com" "net.anydesk.com".

Also try with Custom URL List...

[SOCBME]

Hello,

Any update? Anydesk not working for me neither.

Regards,

[Nehmaan]

Having the same issue. Pain in the ass!