Student extensive use of VPNs.

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Student extensive use of VPNs.

L0 Member

Hello Livecommunity. We are in a bind. We have numerous students on our school networks that are bypassing security profile rules with VPNs. So frustrating. I do have rulesets that look for annnomizers and proxies. I also have explicit rules that look for categories such as Facebook, Snapchat, etc... Not sure what to do. I worry that the more rules I setup in the firewall, the more work it has to do and gets sluggish? Am I right? I did see something about disabling 'QUIC" which I can but want this firewall to be optimized and working very well. 

 

Any suggestions (even mean ones) appreciated. 

 

Best,

 

Jean-Claude

2 REPLIES 2

L7 Applicator

Firewall don't see into QUIC traffic so it is best practice to block it.

Block URL category proxy-avoidance-and-anonymizers

 

In addition create application filter for subcategory "encrypted-tunnel" (Objects > Application Filters) and block it for students.

Place this block rule after you have permitted outgoing SSL application.

 

Enterprise Architect, Security @ Cloud Carib Ltd
ACE, PCNSE, PCNSI

Thanks @Radio_Rattameister, will try tonight. 

 

 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!