topic Re: Proxy block in General Topics

Proxy block

djbisbey — Fri, 05 Nov 2010 10:28:36 GMT

Hi,

we have some clever students...

they have found if they get a proxy address (prior to joining our network) and add it into their firefox they are getting out on the internet and from what they say bypassing the Palo URL check.

Is there a way I can lock this down, I did think of http-proxy would this do it or is there a more robust clever way?

Thanks

Darren

Re: Proxy block

James — Fri, 05 Nov 2010 10:45:51 GMT

Hi Darren,

If you don't have a legitimate proxy beyond the Palo Alto Appliance - then I suggest blocking all proxy applications. You can use the App-ID Categorisation and build a filter - this can be done through the policy UI or you'll find application filters under objects. Just tick the box named proxy:

As a filter you can see there are currently 39 matching applications. If we add number 40 and/or more through content updates, they'll automatically be added to your rule set. So this is a great way to keep the policy relevent and up to date. You'll then block other applications like Ultrasurf, which some students may have discovered too

Thanks

James

Re: Proxy block

djbisbey — Fri, 05 Nov 2010 10:52:28 GMT

Awesome..

the more I play with this product the more it blows me away...

:smileylaugh: