Block PSIPHON 3

[VinceM]

Hi all,

Does anybody already try with success to block Psiphon (https://www.psiphon3.com) ?

It's quite easy when psiphon is configured in VPN mode but how can I do that when VPN is not used ?

Thanks in advance for sharing.

V.

[OtakarKlier]

Hello,

If you use some kind of web filtering, this should be able to block it on your network. I just checked the PAN-DB-URL and that url is:

URL

psiphon3.com

Category

Computer and Internet Info

So if the product, I dont know its workings, uses the same URL, you should be able to block it.

[VinceM]

Hi,

URL filtering can't be used because after "installing" the psiphon client, you need to initiate connexion.

These connexions are based on SSL then no URL filtering ... 😞

V.

[OtakarKlier]

Hello,

I do not know how the client works so I cannot see the traffic for myself. However you should still be able to see the URL's eventhough the traffic is SSL. Perhaps a submission for application detection is in order?

Custom signatures:

https://live.paloaltonetworks.com/t5/Documentation-Articles/Custom-Application-Signatures/ta-p/58625

Submit an application:

http://researchcenter.paloaltonetworks.com/submit-an-application/

Hope this helps...

[OtakarKlier]

Just in case you do use URL filtering:

URL: www.psiphon3.com
Previous category: computer-and-internet-info
You suggested: proxy-avoidance-and-anonymizers
New category: proxy-avoidance-and-anonymizers
The new categorization is available starting with URL DB version: 2015.09.22.220

Regards,