Third party VPN

please I need to ask something we are blocking all VPN application but our employees are still able to connect to a free VPN application and break our security rules and policies we have policy to deny Facebook and Instagram but once the employee connect to a free VPN app he is able to break this policy and open Facebook and Instagram easily

even though we have blocked these apps on the FortiGate security profiles.

Any advise please