Check Point Advisories

Security Best Practice: Domains Block List Protection - Blocking LogMeIn

Check Point Reference:	SBP-2007-04
Date Published:	8 Mar 2007
Severity:	Medium
Last Updated:	Wednesday 25 April, 2007
Source:	SmartDefense Research Center
Protection Provided by:
Who is Vulnerable?	Microsoft Windows operating systems
Vulnerability Description	LogMeIn is a remote control application that provides access to any Windows PC from anywhere in the world. It only requires a computer connected to the Internet. The user can remotely access a target computer and have a full desktop view and complete control of everything on it, including: Remote access, File Transferring, Remote Printing and File Sharing. The use of LogMeIn may circumvent the organizational security policy. SmartDefense is able to detect and block LogMeIn via denying the access to its Web interface.
Vulnerability Details	SmartDefense contains a Block List for the purpose of filtering out undesirable traffic. A Block List is a group of URL addresses that have been prohibited. SmartDefense will not allow a user to access a domain address specified in the Block list.