not able to block Psiphon proxy from mobile

Hi,

have you installed the CA on the phone? Do you have limited ports available rather than any?
ian

Thanks for the reply!
I have installed the CA in the mobile.The port related point is not clear. Are you asking about the physical ethernet ports of my firewall. Its XG115 (SFOS 18.5.1 MR-1-Build326) and all ports are in use.  

In the firewall rule you need to limit which ports you allow rather than using any. You should use http/s.

ian

Thanks for the reply!
After allowing only http/s services, proxy is blocking but Whatsapp, MS Teams and other VOIP like services not working. if im enabling UDP for the VOIP, its helping  Psiphon to start working. 

Any solution to restore this issue. Kindly suggest. 

Hi,

You need to setup exceptions to the failing applications in the web exceptions. Further you will need to create new firewall rule that'd allows the VoIP devices only and points at the VoIP provider server address as well as limiting the ports used by the VoIP devices.

Ian

Hi,

You need to setup exceptions to the failing applications in the web exceptions. Further you will need to create new firewall rule that'd allows the VoIP devices only and points at the VoIP provider server address as well as limiting the ports used by the VoIP devices.

Ian

Thanks for the reply,

I have created one Rule with Mobile IP address to WhatsApp server Public IP address for only WhatsApp service (Service with WhatsApp specific Ports) but failed to enable the WhatsApp communication.  Its showing connecting and downloading and uploading the Images failed. When capturing the packet and filtering with violation, nothing is showing. If possible kindly guide about the next steps. Regarding the Web exceptions, how to use it in the case of WhatsApp application. If possible please advice. 

WhatsApp used ports: UDP Ports: 34784, 45395, 50318, 59234, TCP Ports: 443, 80, 4244, 5222, 5223, 5228,50318, 59234 & 5242.  WhatsApp Server Public Ip Address: 66.111.48.0/255.255.252.0,66.111.48.0/255.255.255.0,66.111.49.0/255.255.255.0,66.111.50.0/255.255.255.0, 66.111.51.0/255.255.255.0). 

With Regards,

KS Ghosh