Can not block x-vpn on port 80

Salathiwe — Fri, 06 Dec 2024 08:41:31 GMT

Please can we have some assistance with blocking x-vpn. We currently have

Decryption enabled

DNS proxy enabled

The threats are set to reset/drop/block in screenshots

Despite all of this, the HTTP-2 connection method in x-vpn successfully establishes a connection by obfuscating as random allowed sites such as www.office.com [office.com], www.yahoo.co.uk [yahoo.co.uk], www.google.com [google.com] etc.

It uses port 80 for the obfuscation so there is no SSL to decrypt. For example, it will obfuscate www.yahoo.co.uk [yahoo.co.uk] on port 80 (web-browsing)

Please see attached screenshot

Re: Can not block x-vpn on port 80

OtakarKlier — Mon, 09 Dec 2024 22:41:57 GMT

Hello,

When you look at the unified logs, is there a URL or Application associated with it? If yes you should be able to block on it.

Regards,

topic Can not block x-vpn on port 80 in General Topics

Can not block x-vpn on port 80

Re: Can not block x-vpn on port 80