Controlling use of Remote Access Tools

[Art]

Hello,

   I am researching how to better controll the use of Remote Access Tools, such as LogMeIn, by the user base.

   I know we have the sub-category of "remote-access" that I can use to create an application filter.  Which I can then use on a rule... This strikes me as a "put head against wall and push till wall falls" method... it will work ... but not very finesseful.

   Anyone have more finesseful ways to do this?

Thanks

Art

[Phoenix]

Hello Art,

In the Applipedia there are 2 apps 1> Logmein 2> logmeinrescue. I think based on the application definition given we can just have these apps defined in the rule and take the required action to control the related traffic. There is no need of application filter as it may have lot many other apps relative to the sub-category of "remote-access". If the intention is to specifically control logmein based traffic then the above 2 apps should address. If it is more generic then an App filter looks good. If we know all the remote access tools which needs to be blocked then App group is better.

Hope these 3 methods should address.

Thanks

[Art]

Thanks Phoenix!

   Great answer and it is the middle case that I wan't to do ... controll access to any and all applications categorized as 'Remote Access Tools'.

thanks

Art