I want to be able to block PotatoVPN Traffic. I am successful in most of my other VPN threat hunting safaris but this one is fairly new and my current rules don't capture this little guy. Has someone out there created a policy that successfully blocks potatovpn.
Can I create a policy rule simply off of the identified threatID of potatovpn which Paloalto logs properly? I have never done this before. PotatoVPN is not in the Applicpedia database to choose it by appid
... View more