SonicALERT
Search

Sonicwall Signatures


Go to All Categories list.
Go to All Applications list.

  SolarWinds Dameware -- TCP Activity (Mini Remote Control)

Category: REMOTE-ACCESS      

Application: SolarWinds Dameware      

DameWare Mini Remote Control (DMRC) is a lightweight remote control intended primarily for administrators and help desks for management of desktop systems.

This signature can detect/prevent the connection between the host and client of DMRC.

To block DameWare NT Utilities (DNTU), one way is blocking all File and Printer Sharing (NetBIOS/SMB) services by the firewall. These services use the following TCP/UDP ports:137, 138, 139 and 445.


Relevant Information