How to block calls and meetings in VDI on network level

%3CLINGO-SUB%20id%3D%22lingo-sub-1320729%22%20slang%3D%22en-US%22%3EHow%20to%20block%20calls%20and%20meetings%20in%20VDI%20on%20network%20level%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1320729%22%20slang%3D%22en-US%22%3E%3CP%3EHow%20can%20I%20block%20all%20Teams%20audio%20and%20video%20when%20running%20in%20a%20VDI%3F%20We're%20about%20to%20deploy%20Teams%20in%20our%20VDI%20environment%20(Vmware%20Horizon%2C%20Windows%2010%2C%20no%20Citrix)%20and%20don't%20want%20the%20users%20to%20be%20able%20to%20do%20audio%2Fvideo%2C%20because%20that's%20a%20huge%20performance%20hit%20on%20our%20infra%2Fnetwork.%20But%20when%20used%20outside%20the%20VDI%20environment%2C%20like%20from%20home%20or%20on%20a%20mobile%20device%2C%20audio%2Fvideo%20is%20fine.%20So%20Teams%20user%20policies%20can't%20help%20us%20here.%3C%2FP%3E%3CP%3EI%20looked%20at%20the%20Teams%20desktop%20app%20and%20found%20a%20few%20json%20files%20with%20a%20lot%20of%20settings%2C%20but%20wasn't%20able%20to%20use%20this%20and%20don't%20know%20if%20any%20of%20these%20setting%20controls%20the%20use%20of%20audio%2Fvideo.%20Now%20I'm%20trying%20to%20find%20out%20which%20tcp%2Fudp%20ports%20and%20IP%20ranges%20to%20block%20on%20our%20firewall%20(for%20the%20VDI%20subnet)%2C%20so%20users%20can%20still%20use%20Teams%20for%20chat%20%2F%20documents%2C%20but%20not%20for%20audio%2Fvideo.%20I've%20tried%20to%20block%20UDP%203478-3481%2C%20and%20also%2050000-50059%20(source%20and%20dest)%2C%20but%20to%20no%20avail.%20I%20can%20still%20join%20a%20meeting.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECan%20somebody%20help%20me%20to%20figure%20out%20which%20ranges%20to%20block%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1320729%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3Eblock%20vdi%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2059774%22%20slang%3D%22en-US%22%3ERe%3A%20How%20to%20block%20calls%20and%20meetings%20in%20VDI%20on%20network%20level%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2059774%22%20slang%3D%22en-US%22%3EAny%20update%20is%20on%20this%20question%3F%20We%20have%20the%20same%20issue%20with%20a%20couple%20of%20our%20customers.%3CBR%20%2F%3Ethey%20use%20a%20RDS%2FVDI%20for%20some%20business%20applications%20and%20Outlook%20but%20also%20want%20to%20use%20Teams.%20They%20need%20to%20be%20able%20to%20use%20Teams%20chat%2F%20schedule%20meetings%20with%20the%20outlook%20plugin%20etc%20from%20within%20the%20RDS%2FVDI.%20But%20also%20use%20Teams%20with%20full%20features%20from%20their%20local%20device.%3C%2FLINGO-BODY%3E
New Contributor

How can I block all Teams audio and video when running in a VDI? We're about to deploy Teams in our VDI environment (Vmware Horizon, Windows 10, no Citrix) and don't want the users to be able to do audio/video, because that's a huge performance hit on our infra/network. But when used outside the VDI environment, like from home or on a mobile device, audio/video is fine. So Teams user policies can't help us here.

I looked at the Teams desktop app and found a few json files with a lot of settings, but wasn't able to use this and don't know if any of these setting controls the use of audio/video. Now I'm trying to find out which tcp/udp ports and IP ranges to block on our firewall (for the VDI subnet), so users can still use Teams for chat / documents, but not for audio/video. I've tried to block UDP 3478-3481, and also 50000-50059 (source and dest), but to no avail. I can still join a meeting.

 

Can somebody help me to figure out which ranges to block?

1 Reply
Any update is on this question? We have the same issue with a couple of our customers.
they use a RDS/VDI for some business applications and Outlook but also want to use Teams. They need to be able to use Teams chat/ schedule meetings with the outlook plugin etc from within the RDS/VDI. But also use Teams with full features from their local device.