Hotspot Shield VPN still works even though traffic logs show deny – Palo Alto Firewall

[mohammedsalhis]

Dear Team ,

I’m facing an issue where Hotspot Shield VPN application is not being blocked, even though the Traffic Logs clearly show deny actions, Hotspot Shield VPN still successfully connect, and end users can browse the internet through the VPN.

applications like ssl, web-browsing, unknown-tcp, or unknown-udp ipsec .. all are blocked.

Thank you 

[OtakarKlier]

Hello,

Make sure you have Log at session end is enabled on all your policies and then check the Unified Logs.

Regards,