This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to totally blocked psiphon/ultrasurf

Hi Guys,

Does anyone know how to totally blocked Psiphon? I already raised this issue to Sophos XG support, He sets ips maxpkts, QUIC, port blocking, etc. but still it bypasses the blocking. I have this issue for almost a year but until now it seems there is no solution even upgrading to the latest firmware. On the other UTM/NGFW brand/devices they can blocked Psiphon. I hope this issue soon be resolved.

Jesen

This thread was automatically locked due to age.

Parents

0 Jesen Sodela over 4 years ago

Hi Guys,

I was able to blocked Psiphon and other proxy tunneling apps by following the instruction on the KB you have sent me. My only concern is that I need to install the SSL CA Certificate on each Device/Browser so the policy would take effect or else I cannot browse anything. (once I enable decryption and HTTPS scanning)

My question is that, did anyone of you tried to block Psiphon using the IPS pattern? TIA.
Cancel
Vote Up 0 Vote Down

Cancel
0 Keyur over 4 years ago in reply to Jesen Sodela

Hi Jesen Sodela

Please refer the article to push certificate to the user- https://community.sophos.com/kb/en-us/42153

Regards,

Keyur
Community Support Engineer | Sophos Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'This helped me' link
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Keyur over 4 years ago in reply to Jesen Sodela

Hi Jesen Sodela

Please refer the article to push certificate to the user- https://community.sophos.com/kb/en-us/42153

Regards,

Keyur
Community Support Engineer | Sophos Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'This helped me' link
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Jesen Sodela over 4 years ago in reply to Keyur

Hi Keyur,

Thanks for the link, actually I am thinking of push installation using active directory but this is only possible for PCs. How about mobile phones or EU that has no AD? Back to my question, Have you tried to create or block Psiphon using IPS custom signature/pattern?
Cancel
Vote Up 0 Vote Down

Cancel