X-VPN not getting decrypted

Showing results for 
Show  only  | Search instead for 
Did you mean: 

X-VPN not getting decrypted

L4 Transporter



We would like to block the application X-VPN (used on apple iOS system as a VPN app). Using PAN-OS 8.0.1
The firewall sees the traffic as either SSL, web-browsing or google base traffic and doesn’t appear to be decrypting it.

The session ID says the URL is for bing.com in the session but the destination is which is where the VPN is hosting their services.


We have tried the following:

Change service (under Policies/Security) to application-default

Select block all sessions (under Objects>Decryption Profile>SSL Proxy)




Any thoughts on this?

Thanks in advance.





Just wondering if this is still the way you are blocking X-VPN, and is it effective?




L0 Member

Setting up a signature is an option that might work for these types of programs, but it would be only a temporary solution.

      Sadly, students seem to always figure out a way to continue to bypass our firewall. I would suggest your organization provided a ticket system to allow your students to request the usage of certain websites or applications. Generally, students will try to access a site(such as youtube.com, which is commonly used for entertainment, research and studies), and are often annoyed that it is blocked, leaving them to attempt other methods that could put their device and your network at risk. Figuring out what sites students would prefer unblocked and if the application is not considered harmful, this allows students to turn to these methods rather than trying to "bypass" the restrictions. 

       If you are concerned about students using certain sites for malicious purposes, you can include the rights and limitations of the specific type in your organization's Acceptable Use Policy.

Is there anything malicious they are doing with this VPN?

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!