Can not block x-vpn on port 80

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Can not block x-vpn on port 80

L2 Linker

Please can we have some assistance with blocking x-vpn. We currently have

 

Decryption enabled

DNS proxy enabled

The threats are set to reset/drop/block in screenshots 

 

Despite all of this, the HTTP-2 connection method in x-vpn successfully establishes a connection by obfuscating as random allowed sites such as www.office.com [office.com], www.yahoo.co.uk [yahoo.co.uk], www.google.com [google.com] etc.

It uses port 80 for the obfuscation so there is no SSL to decrypt. For example, it will obfuscate www.yahoo.co.uk [yahoo.co.uk] on port 80 (web-browsing)

 

Please see attached screenshot

P.S
1 REPLY 1

Cyber Elite
Cyber Elite

Hello,

When you look at the unified logs, is there a URL or Application associated with it? If yes you should be able to block on it.

Regards,

  • 203 Views
  • 1 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!