To Block psiphon vpn application at Fortigate 2500E and 101F

Forum|Forum|3 years ago
July 10, 2022
4 replies
9006 views

Dear all,

Let me ask some helps from you all, i'm facing some case that i'm trying to block vpn application at our fortigate firewall, cloudflare and psiphon vpn apps:. It does not work using p2p and proxy to deny these apps:. Cloudflare is ok to deny by blocking cloudflare used ip address and ports. But, psiphon is not ok to block by choosing psiphon at application.

Anyone have ever been? or could you pls anyone help that problem to solve? Thanks much!

FortiGate

Best answer by Yurisk

Try to find this specific application by name, not as part of some category, seems like Fortiguard have a signature for this app: https://www.fortiguard.com/appcontrol/32642

Pay attention to the notes - you have to block QUIC protocol altogether, and to reach 100% identification use SSL Deep inspection as well.

YuriskAnswer

SuperUser

Try to find this specific application by name, not as part of some category, seems like Fortiguard have a signature for this app: https://www.fortiguard.com/appcontrol/32642

Pay attention to the notes - you have to block QUIC protocol altogether, and to reach 100% identification use SSL Deep inspection as well.