Is a remote-desktop app that staff installed on an office PC a risk?

Yes. Remote-desktop apps that work through the vendor's cloud need no open port, so they slip past the firewall and create a permanent door into the office network protected only by that app's account. Support scammers use the same apps, and attackers who steal the account, or who are already inside, can use an installed tool to come back at any time without malware. The person who installed it usually meant well, so offer a sanctioned alternative: the company VPN, a remote-desktop gateway or one approved remote-support tool with multi-factor authentication, managed by IT. Then block the installation of unapproved software and remove the others. On the network, these apps keep a regular connection to their relay servers, which NetSenX flags as beaconing on every plan; when the agent runs on that computer, the alert names the local program. NetSenX does not uninstall or block the app.

← All 40 questions on Remote work and exposed servicesAll topics