Sophos Firewall

Discussions XG Firewall unable to block Psiphon Proxy

Sophos Firewall requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 7 replies
Subscribers 28 subscribers
Views 11334 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG Firewall unable to block Psiphon Proxy

Elmer Morales1 over 7 years ago

Hi Everyone,

Good Day!

We have issue on blocking Psiphon application.

We have Application Policy with blocking to DNSScrypt, DNS Multiple QNAME and Proxy and Tunnel Category.

For Web Policy denied None, IPAddress, Peer-to-peer & torrents, Anonymizers.

With the policy applied to firewall rule, this application can still be connected and bypass the blocking.

We also modified the maxpkts to 40, 60, 80, 100, 120 and 200 but still no luck.

Hope someone can help me to provide resolution on this matter.

Thank you!

Regards,

Elmer Morales

This thread was automatically locked due to age.

Parents

0 Support Chn over 7 years ago

Hi,

We have raised a request to block psiphon proxy before 6 months and sophos support was able to fix it. After going through your thread i tested it on SFOS 17.0.8 MR-8 and i can confirm that Sophos is not able to psiphon proxy 3.
Cancel
Vote Up 0 Vote Down

Cancel
0 Elmer Morales1 over 7 years ago in reply to Support Chn

Hello,

Yes, Sophos cannot block psiphon thru web and application filter only.

It is now needed to enable Decrypt and Scan HTTPS which requires to import the SSL CA certificate to your browser.

Thanks!
Cancel
Vote Up 0 Vote Down

Cancel
0 Support Chn over 7 years ago in reply to Elmer Morales1

Hi,

We have enabled full SSL inspection already and it doesn't work.

I'm testing on multiple servers and sophos is able to block only few countries.
Cancel
Vote Up 0 Vote Down

Cancel
0 Elmer Morales1 over 7 years ago in reply to Support Chn

Hello,

Please try below settings.

-Firmware version SFOS 17.0.8 MR-8

-IPS and Application signatures 3.14.87

-Set maxpkts 100

-Block DNS Multiple QNAME and DNSCrypt in Application Policy

-Block IPAddress and None category in Web Policy

Thanks!
Cancel
Vote Up 0 Vote Down

Cancel
0 Christopher de Vera over 7 years ago in reply to Elmer Morales1

Tried this but still no luck.

Regards,
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Christopher de Vera over 7 years ago in reply to Elmer Morales1

Tried this but still no luck.

Regards,
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data