Does Palo Alto block SoftEther VPN Client application??

[Carracido]

Hello all,

Does anyone know whether Palo Alto can block the SoftEther VPN Client application?? Is a custom application needed to block that traffic??

Many thanks in advance.

Kind Regards,

Marcos.

[pankaku]

If you cannot found any then custom application should be created make sure that custom application should be match any other traffic.

[bmorris1 · Accepted solution]

Hi Marcos,

Currently there is no App-ID for this, you can request one here:

https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Request-a-new-App-ID/ta-p/60834

Or create a custom app.

Or you could find out the protocols and domains it uses and then create a rule to block these. You can run traffic through the firewall with a test rule and then see what traffic hits this rule and block those applications & URLS.

hope this helps,

Ben

[Carracido]

Many thanks guys for your answers.

Best Regards,

Marcos.

[maurisy]

Currently we don't have an App-ID for this application. As part of our App-ID best practices we recommend blocking protocols like IPSec/IKE and similar to unknown destinations on the internet. Could you let us know how this traffic is cucrently identified? Are you trying to block or allow?

-Thanks

The Palo Alto Networks App-ID Team 

[nredaj]

Some users started to use SoftEther VPN client on our company which allows them to bypass URL Filtering policy. How can we allow them to use VPN client but still allow or block access to certain websites. We already implemented SSL decryption rule but it is not working when they are using SoftEther VPN.