Yes, you are correct, and my advice may not be the best.
Not all VPNs are Proxy software.
You can use the following custom application control signature and the official application control signature "ISAKMP" and "OpenVPN" for Proton VPN.
F-SBID( --protocol tcp; --service SSL; --pattern "protonvpn."; --context host; --no_case; --app_cat 6; --weight 10; )
- Toss a 'Like' to your fixxer, oh Valley of Plenty! and chose the solution, too00oo -