Hotspot Shield VPN still works even though traffic logs show deny – Palo Alto Firewall

mohammedsalhis — Tue, 27 Jan 2026 08:51:39 GMT

Dear Team ,

I’m facing an issue where Hotspot Shield VPN application is not being blocked, even though the Traffic Logs clearly show deny actions, Hotspot Shield VPN still successfully connect, and end users can browse the internet through the VPN.

applications like ssl, web-browsing, unknown-tcp, or unknown-udp ipsec .. all are blocked.

Thank you

Re: Hotspot Shield VPN still works even though traffic logs show deny – Palo Alto Firewall

OtakarKlier — Wed, 28 Jan 2026 17:05:34 GMT

Hello,

Make sure you have Log at session end is enabled on all your policies and then check the Unified Logs.

Regards,

topic Re: Hotspot Shield VPN still works even though traffic logs show deny – Palo Alto Firewall in General Topics

Hotspot Shield VPN still works even though traffic logs show deny – Palo Alto Firewall

Re: Hotspot Shield VPN still works even though traffic logs show deny – Palo Alto Firewall