topic Re: What's the best user to block internal users trying to access the internet with a VPN client in General Topics

What's the best user to block internal users trying to access the internet with a VPN client

Wasfi.Bounni — Tue, 09 Apr 2019 03:29:45 GMT

Hi;

What's the best way to block internal users trying to access the internet with a VPN client. I mean I want to disallow all internal users from establishing a VPN while on the "Trusted Zone", whether it is an IP-SEC or SSL VPN.

Kindly

Wasfi

Re: What's the best user to block internal users trying to access the internet with a VPN client

reaper — Tue, 09 Apr 2019 07:24:08 GMT

create an application filter for all encrypted-tunnel applications and put that in a block rule (ssl decryption will be required to catch many of these)

Re: What's the best user to block internal users trying to access the internet with a VPN client

Wasfi.Bounni — Tue, 09 Apr 2019 12:37:49 GMT

Thank you.

Wasfi

Re: What's the best user to block internal users trying to access the internet with a VPN client

hshawn — Tue, 09 Apr 2019 15:34:22 GMT

We do this here by just not adding the VPN zone to the outbound NAT policy. There are a few ways you can do it but this works well for us with minimal configuration effort.

p.s. employees can use the internet but vendors we do not allow (each has a seperate and unique zone)

Re: What's the best user to block internal users trying to access the internet with a VPN client

Wasfi.Bounni — Wed, 10 Apr 2019 00:33:50 GMT

Thank you

Wasfi