12-06-2024 12:41 AM
Please can we have some assistance with blocking x-vpn. We currently have
Decryption enabled
DNS proxy enabled
The threats are set to reset/drop/block in screenshots
Despite all of this, the HTTP-2 connection method in x-vpn successfully establishes a connection by obfuscating as random allowed sites such as www.office.com [office.com], www.yahoo.co.uk [yahoo.co.uk], www.google.com [google.com] etc.
It uses port 80 for the obfuscation so there is no SSL to decrypt. For example, it will obfuscate www.yahoo.co.uk [yahoo.co.uk] on port 80 (web-browsing)
Please see attached screenshot
12-09-2024 02:41 PM
Hello,
When you look at the unified logs, is there a URL or Application associated with it? If yes you should be able to block on it.
Regards,
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
