1

Our company's security policy requires passwords to be 12 characters. Apple Remote Desktop (ARD) clients have a limit of 8 characters (I'm not sure why, but I think its due to historical reasons).

We want to block Apple Remote Desktop clients because they can't comply with the policy. Here, block means drop the network connection before the client attempts to provide credentials.

Is there a way to reliably detect Apple Remote Desktop (ARD) clients?

Improve this question
6
  • Block them from doing what? If they "can't comply", they can't log in anyway… Maybe I misunderstood what your actual problem is. – user94148 Oct 10 '14 at 17:37
  • @hop - My bad, you are right. I did not explain what block meant. – user83961 Oct 10 '14 at 17:52
  • Again, what would be gained by this block? – user94148 Oct 10 '14 at 18:00
  • @hop - they are attempting to enforce the policy at the network level rather than the application level. I'm not sure how they can do it at the network level, though. They may need to wait a bit until they see a string like "Apple VNC Client" or similar. – user83961 Oct 10 '14 at 18:53
  • the whole concept is flawed. – user94148 Oct 10 '14 at 19:15
1

to block: you could have your switches filter ports. though, you might also block vnc if you do 5900.

or to detect, i'd say use something like bonjour browser utility to find services, or nmap to find active ports.

3283 TCP/UDP Net Assistant - net-assistant Apple Remote Desktop 2.0 or later (Reporting feature)

5900 TCP Virtual Network Computing (VNC) (Unregistered Use) - vnc-server Apple Remote Desktop 2.0 or later (Observe/Control feature) Screen Sharing (Mac OS X 10.5 or later)

Improve this answer
1
  • you can't block/filter (ip)-ports with layer 2 (data link layer) devices – klanomath Oct 11 '14 at 23:51

You must log in to answer this question.