topic Re: Does Palo Alto block SoftEther VPN Client application?? in General Topics

Does Palo Alto block SoftEther VPN Client application??

Carracido — Thu, 21 Jan 2016 16:22:37 GMT

Hello all,

Does anyone know whether Palo Alto can block the SoftEther VPN Client application?? Is a custom application needed to block that traffic??

Many thanks in advance.

Kind Regards,

Marcos.

Re: Does Palo Alto block SoftEther VPN Client application??

pankaku — Thu, 21 Jan 2016 16:42:42 GMT

If you cannot found any then custom application should be created make sure that custom application should be match any other traffic.

Re: Does Palo Alto block SoftEther VPN Client application??

bmorris1 — Thu, 21 Jan 2016 16:43:44 GMT

Hi Marcos,

Currently there is no App-ID for this, you can request one here:

https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Request-a-new-App-ID/ta-p/60834

Or create a custom app.

Or you could find out the protocols and domains it uses and then create a rule to block these. You can run traffic through the firewall with a test rule and then see what traffic hits this rule and block those applications & URLS.

hope this helps,

Ben

Re: Does Palo Alto block SoftEther VPN Client application??

Carracido — Fri, 22 Jan 2016 10:40:23 GMT

Many thanks guys for your answers.

Best Regards,

Marcos.

Re: Does Palo Alto block SoftEther VPN Client application??

maurisy — Fri, 05 Feb 2016 21:22:54 GMT

Currently we don't have an App-ID for this application. As part of our App-ID best practices we recommend blocking protocols like IPSec/IKE and similar to unknown destinations on the internet. Could you let us know how this traffic is cucrently identified? Are you trying to block or allow?

-Thanks

The Palo Alto Networks App-ID Team

Re: Does Palo Alto block SoftEther VPN Client application??

nredaj — Mon, 11 Mar 2019 05:49:48 GMT

Some users started to use SoftEther VPN client on our company which allows them to bypass URL Filtering policy. How can we allow them to use VPN client but still allow or block access to certain websites. We already implemented SSL decryption rule but it is not working when they are using SoftEther VPN.