To Block psiphon vpn application at Fortigate 2500E and 101F

[JJM]

Dear all,

Let me ask some helps from you all, i'm facing some case that i'm trying to block vpn application at our fortigate firewall, cloudflare and psiphon vpn apps:. It does not work using p2p and proxy to deny these apps:. Cloudflare is ok to deny by blocking cloudflare used ip address and ports. But, psiphon is not ok to block by choosing psiphon at application. 

Anyone have ever been? or could you pls anyone help that problem to solve?  Thanks much!

[Yurisk · Accepted solution]

Try to find this specific application by name, not as part of some category, seems like Fortiguard have a signature for this app: https://www.fortiguard.com/appcontrol/32642

Pay attention to the notes - you have to block QUIC protocol altogether, and to reach 100% identification use SSL Deep inspection as well.

[echacon]

It is not work that you say!!

[echacon]

even with SSL Deep inspection!!

[Khsajid]

i tried the above setting in Deep SSL and the Psiphon is not connecting anymore 

without deep SSL inspection its not possible to block psiphon VPN.

[JJM]

thanks for your help, @Khsajid . Let me test in my lab with this setting.

[psiphoniphone]

best way to bypass the original file name with a classic firewall system and then restart the VPN its works

https://gadgetssai.blogspot.com/2017/02/psiphon-app-download-psiphon-app-for.html