Can VNC traffic be monitored?

book

Article ID: 160381

calendar_today

Updated On:

Products

Data Loss Prevention Endpoint Prevent Data Loss Prevention Network Monitor Data Loss Prevention Network Prevent for Email Data Loss Prevention Network Prevent for Web Data Loss Prevention Network Protect Data Loss Prevention Endpoint Discover

Issue/Introduction

Is monitoring of VNC traffic possible?

Resolution

In short: No, you can not monitor VNC traffic.

VNC uses an RFB Protocol (Remote Frame Buffer) to display information by rendering the screen on the remote desktop. The communication essentially consists of the API call made to the graphic driver and this can not be detected. In addition, the communication can be encrypted based on which RFB implementation is used. Encrypted traffic can not be decrypted.