TeamViewer restrict unsupervised access

[JuliusArnold]

Hey everyone,

i got a question from one of our customers, described below:

Constellation:
PC1 (At home, with internet-access)  <-->  PA-firewall  <-->  PC2 (at office, TeamViewer-controllable)

Now, to the question. The costumer wants to restrict the access on PC2, so that PC1 can only connect when PC2 explicitely granted access (from a user sitting in front of it) but not when Team.V is set to "automatically allow connections" to PC2.

Til here no problem, that would be one simple setting on PC2.

The problem here is, PC2 is in an unsafe location, theoretically, everyone has access to it and could change TeamV.-settings to gain access to PC2 without confirmation.

Is there any way to restict the PA to just let TeamV.-traffic only pass when PC2 has explicitely granted (from a user sitting in front of it) access to control it?

Thanks in advance

Julius

[BPry]

I'm almost positive that it's a software setting that simply accepts all connections automatically if allowed, teamviewer doesn't sperate ports for auto-connect or anything like that. I'm not positive but I would say that this isn't do-able from a firewall prospective. 

I'm pretty sure that the TeamViewer applicaiton if purchased for commercial use can be locked down so that this option cannot be enabled if I'm not mistaken however; I would try that route. 

[JuliusArnold]

Thanks for your reply, we'll test this today.