topic Re: Prevent User Traffic from Proton VPN Application in General Topics

Prevent User Traffic from Proton VPN Application

DWilkin — Fri, 11 Sep 2020 08:01:08 GMT

Hi All,

Just wondering if anyone has a solution in creating either an application id for proton vpn, and or other methods in preventing users from bypassing the palo firewall.

https://protonvpn.com/

I have discovered today that this application is not being blocked or denied access from internal users.

Thanks

Regards

Daniel

Re: Prevent User Traffic from Proton VPN Application

kiwi — Thu, 17 Sep 2020 09:57:45 GMT

Hi @DWilkin ,

How is the traffic being identified ? Are you decrypting (if possible) ?

You could try blocking encrypted tunnel and proxy traffic. But you might be blocking too much this way.

In addition you can block IP addresses that the app is using.

Cheers,

-Kiwi.

Re: Prevent User Traffic from Proton VPN Application

DWilkin — Fri, 18 Sep 2020 00:01:56 GMT

Hi Kiwi,

Doing some deeper log searchers it appears that open-vpn is capturing and recording users use of proton vpn application. Currently checking and creating restrictions on the app-id open vpn for these group of users. Will advise once I have had time to perform some testing.

Appreciate your response and input though - cheers.