Is it possible deny the user access web site by proxy???

[yaowen]

The scenario is just allow user access system directly, deny all if using forward or reverse proxy such as nginx、apache2、liqud and so so??

What should i set? Application or other else?

[reaper]

Hi

to block traditional proxy sessions you can simply block the http-proxy application. any session going through an on-site proxy will be first identified as http-proxy before becoming web-browsing and so on

if you want to block all sorts of proxies, including avoidance tools and cloud based proxies, you can create an application filter that matches on the 'proxy' subcategory and will include every application that matches this behavior