1

Our company's security policy requires passwords to be 12 characters. Apple Remote Desktop (ARD) clients have a limit of 8 characters (I'm not sure why, but I think its due to historical reasons).

We want to block Apple Remote Desktop clients because they can't comply with the policy. Here, block means drop the network connection before the client attempts to provide credentials.

Is there a way to reliably detect Apple Remote Desktop (ARD) clients?

Improve this question
6
  • Block them from doing what? If they "can't comply", they can't log in anyway… Maybe I misunderstood what your actual problem is.
    – user94148
    Oct 10, 2014 at 17:37
  • @hop - My bad, you are right. I did not explain what block meant.
    – user83961
    Oct 10, 2014 at 17:52
  • Again, what would be gained by this block?
    – user94148
    Oct 10, 2014 at 18:00
  • @hop - they are attempting to enforce the policy at the network level rather than the application level. I'm not sure how they can do it at the network level, though. They may need to wait a bit until they see a string like "Apple VNC Client" or similar.
    – user83961
    Oct 10, 2014 at 18:53
  • the whole concept is flawed.
    – user94148
    Oct 10, 2014 at 19:15

1 Answer 1

Reset to default
1

to block: you could have your switches filter ports. though, you might also block vnc if you do 5900.

or to detect, i'd say use something like bonjour browser utility to find services, or nmap to find active ports.

3283 TCP/UDP Net Assistant - net-assistant Apple Remote Desktop 2.0 or later (Reporting feature)

5900 TCP Virtual Network Computing (VNC) (Unregistered Use) - vnc-server Apple Remote Desktop 2.0 or later (Observe/Control feature) Screen Sharing (Mac OS X 10.5 or later)

Improve this answer
1
  • you can't block/filter (ip)-ports with layer 2 (data link layer) devices
    – klanomath
    Oct 11, 2014 at 23:51

You must log in to answer this question.