This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Apple iPhone and iPads using ‘Psiphon Proxy’?

I’ve recently started using the Application Filter feature of Sophos XG, mostly to block any high risk apps. I noticed in my application logs that all of my Apple iPhone and iPads are trying to use a “Psiphon Proxy” at random times that is being blocked. I’m curious if anyone else with Application Filters notices similar behavior with Apple products. Is this legitimate or perhaps a misclassification? None of the Apple devices use any apps that utilize a Psiphon Proxy  (that I’m aware of) and it appears to be trying to access when the phones aren’t necessarily in use. Here is the firewall log:

messageid="17051"

log_type="Content Filtering"

log_component="Application"

log_subtype="Denied"

fw_rule_id="5"

user=""

user_group=""

appfilter_policy_id="10"

category="Proxy and Tunnel"

app_name="Psiphon Proxy"

app_risk="5"

app_technology="Client Server"

app_category="Proxy and Tunnel"

src_ip="172.16.16.27"

src_country="R1"

dst_ip="151.101.129.254"

dst_country="USA"

protocol="TCP"

src_port="55822"

dst_port="443"

bytes_sent="0"

bytes_received="0"

status="Deny"

message=""

appresolvedby="Signature"



This thread was automatically locked due to age.
Parents Reply Children
No Data