This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Block VPN Exntesion/Add-on On Chrome, Opera browser

Hi guys,

I've Sophos XG210 on my company that block all Entertainment Web Browser. Problem is users use VPN add-on on Browser such as Hoxx VPN, Touch VPN, Ultrasurf,... so user still can access to Entertaintment site like "Youtube.com".

I add application rule that lock all VPN, Proxy. But still can't lock VPN Add-on.

Need help.

BGs.

This thread was automatically locked due to age.

Parents

0 FloSupport over 5 years ago
Hey phong nguyen

Have you tried adjusting your configuration as per this KBA?

Sophos XG Firewall / Cyberoam: Application filter recommended settings for better application detection

Regards,
Florentino
Director, Global Community & Digital Support
Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question, please use the 'Verify Answer' button.

The Award-winning Home of Sophos Support Videos! - Visit Sophos Techvids
Cancel
Vote Up 0 Vote Down

Cancel
0 phong nguyen over 5 years ago in reply to FloSupport

Hi, thank you for reply.

I configured as exactly guide on previous link. But still can't lock Hoxx VPN add-on browser base.

Here's my web filter rule

I Deny all P2P, Proxy and Tunel in application too

BGs.
Cancel
Vote Up 0 Vote Down

Cancel
+1 Aditya Patel over 5 years ago in reply to phong nguyen

Hi phong,

We are currently working on this and should be resolved soon. Kindly let us know if this does not resolve in this week.

Ref: NC-42280

Regards,

Aditya Patel
Global Escalation Support Engineer | Sophos Technical Support
Knowledge Base | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 phong nguyen over 5 years ago in reply to Aditya Patel

Thank you,

Waiting for result.

BGs.
Cancel
Vote Up 0 Vote Down

Cancel
0 phong nguyen over 5 years ago in reply to phong nguyen

HI,

Is there anything new about this error ?

BGs.
Cancel
Vote Up 0 Vote Down

Cancel
0 Aditya Patel over 5 years ago in reply to phong nguyen

Hi Phong,

At the moment our development team is working on it. We will inform when the fix is available.

Regards,

Aditya Patel
Global Escalation Support Engineer | Sophos Technical Support
Knowledge Base | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Abdelrahman Tammam over 5 years ago in reply to Aditya Patel

Good day,

Is there anything new about this issue?

regards,
Cancel
Vote Up 0 Vote Down

Cancel
0 FloSupport over 5 years ago in reply to Abdelrahman Tammam

Hi Abdelrahman Tammam

Our development team is still continuing to investigate this issue.

Will reach out when an update is available, thank you for your continued patience.

Regards,

Florentino
Director, Global Community & Digital Support
Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question, please use the 'Verify Answer' button.

The Award-winning Home of Sophos Support Videos! - Visit Sophos Techvids
Cancel
Vote Up 0 Vote Down

Cancel
0 phong nguyen over 5 years ago in reply to FloSupport

Hello, Is there anything new about this issue ?

BGs.
Cancel
Vote Up 0 Vote Down

Cancel
0 envercpt over 5 years ago in reply to phong nguyen

Sophos XG does NOT Block many VPNs like X-VPN out the box. I received a similar email after raising a support issue with Sophos support last year stating that the issue is with the development team. I spent a lot of time trying to troubleshoot this issue with Sophos support with no sign of a fix other than I should try to enable https decryption. In an educational BYOD environment this is equal to BYOD hell! In fact, it's disappointing that the vendor (Sophos) does NOT fulfill it's advertising and marketing promises. Not sure why, as paying customers, we have to spend so much time and effort troubleshooting broken product promises.
Cancel
Vote Up 0 Vote Down

Cancel
+1 Aditya Patel over 5 years ago in reply to phong nguyen

Hello phon,

The issue should now be resolved with the latest IPS signature update, let us know if that does not work.

Regards,

Aditya Patel
Global Escalation Support Engineer | Sophos Technical Support
Knowledge Base | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 phong nguyen over 5 years ago in reply to Aditya Patel

Hi, Tks for support us.

My IPS version is 9.15.65.

I'm testing on some add-on vpn, proxy on chrome, firefox, look good now. Can't fake ip, can't bypass firewall.

I will continue test on more vpn add-on, will let u know if there is anything can bypass firewall asap.

BGs.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 phong nguyen over 5 years ago in reply to Aditya Patel

Hi, Tks for support us.

My IPS version is 9.15.65.

I'm testing on some add-on vpn, proxy on chrome, firefox, look good now. Can't fake ip, can't bypass firewall.

I will continue test on more vpn add-on, will let u know if there is anything can bypass firewall asap.

BGs.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data