Proxy block

[djbisbey]

Hi,

we have some clever students...

they have found if they get a proxy address (prior to joining our network) and add it into their firefox they are getting out on the internet and from what they say bypassing the Palo URL check.

Is there a way I can lock this down, I did think of http-proxy would this do it or is there a more robust clever way?

Thanks

Darren

[James]

Hi Darren,

If you don't have a legitimate proxy beyond the Palo Alto Appliance - then I suggest blocking all proxy applications.  You can use the App-ID Categorisation and build a filter - this can be done through the policy UI or you'll find application filters under objects.  Just tick the box named proxy:

As a filter you can see there are currently 39 matching applications.  If we add number 40 and/or more through content updates, they'll automatically be added to your rule set.  So this is a great way to keep the policy relevent and up to date.  You'll then block other applications like Ultrasurf, which some students may have discovered too

Thanks

James

[djbisbey]

Awesome..

the more I play with this product the more it blows me away...

:smileylaugh: