Hi,
Can I monitor the team if someone that allowed to use anydesk from home to connect to the company.
how Can I monitor when did he used remote access and by which tool.
is it possible by SEM?
Does AnyDesk launch a process on the in office computers? If so, and you have agents on those devices you should be able to alert on a process start and stop. Or, put agents on the remote computers if that is feasible.
I have filtering rules on TCP 6568
This is the default port for anydesk so I have firewall rule(outbound) send a syslog to SEM and configure a rule to alert.
could also use agent but the above approach cover entire network agentless