Block Proxy Browsers?

Some security tools implement a host-based proxy, often with HTTPS inspection on the local PC.   In this scenario, the host-based proxy takes effect before UTM.   UTM should still be able to intercept the traffic because the proxy will be connecting on a normal port number.

If the PC is configured to connect to an Internet-based proxy, it will connect to that server using a non-standard port.   TCP 8080 and TCP 3128 are the most common, but anything is possible.   If you know the port number or the IP address, you could configure UTM to block the traffic, but it will be difficult to inspect it without blocking.   If you don't know the IP address or the port number, the connection will probably work and will bypass the UTM proxy.

Got it. So there is no way to really block all proxy or VPN access etc. even with UTM Content Filtering. You essentially need to know the IPs and block those. Or the ports but then you risk blocking something that may need to get through.

Got it. So there is no way to really block all proxy or VPN access etc. even with UTM Content Filtering. You essentially need to know the IPs and block those. Or the ports but then you risk blocking something that may need to get through.

If you want to block the use of those things via a browser, you choose to block the appropriate categories in Web Filtering.  If you want to block them outside of Web Filtering, use Application Control.  It's often easier to get precise answers when you describe the problem/motivation instead of asking about a solution you've imagined.

Cheers - Bob