Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 4 replies
  • Answers 1 answer
  • Subscribers 28 subscribers
  • Views 1091 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Unable to block Hotspot Shield and Betternet VPN

Vineeth Penugonda

Hi guys,

I have been trying to block hotspot shield and Betternet VPN. I have included them in the Applications Filter.

I have also changed the settings according to this guide: 

https://community.sophos.com/sophos-xg-firewall/f/recommended-reads/119051/sophos-xg-firewall-cyberoam-application-filter-recommended-settings-for-better-application-detection

The client is able to download the applications and use them. The firewall isn't blocking the hotspot shield and Betternet VPN traffic. I am unable to block Hotspot Shield and Betternet VPN.

I am using an XGS 136.

Applications Filter Screenshot



This thread was automatically locked due to age.
Parents
  • 0

    Hello there,

    Thank you for contacting the Sophos Community.

    Make sure using the GUI Packet Filter of the XG the traffic is hitting the correct rule and the SSL certificate is installed in the affected device.

    Additionally, make sure you have followed also this guide if you are running 18.x and above, if you are running 17.5 make sure to upgrade to 18.

    If the issue persists after confirming the traffic is hitting the correct Firewall rule and the configurations are correct on the XG,  please open a case with support that includes the following info

    A tcpdump of the IPS service in debug mode (service -ds nosync ips:debug and service -ds nosync ips:debugp) of the computer to the Firewall and the Firewall to the server and conntrack information of the connection.

    Sophos Firewall: Create and download a packet capture

    Regards, 

     
    Emmanuel (EmmoSophos)
    Technical Team Lead, Global Community Support
    Sophos Support Videos | Product Documentation  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.
Reply
  • 0

    Hello there,

    Thank you for contacting the Sophos Community.

    Make sure using the GUI Packet Filter of the XG the traffic is hitting the correct rule and the SSL certificate is installed in the affected device.

    Additionally, make sure you have followed also this guide if you are running 18.x and above, if you are running 17.5 make sure to upgrade to 18.

    If the issue persists after confirming the traffic is hitting the correct Firewall rule and the configurations are correct on the XG,  please open a case with support that includes the following info

    A tcpdump of the IPS service in debug mode (service -ds nosync ips:debug and service -ds nosync ips:debugp) of the computer to the Firewall and the Firewall to the server and conntrack information of the connection.

    Sophos Firewall: Create and download a packet capture

    Regards, 

     
    Emmanuel (EmmoSophos)
    Technical Team Lead, Global Community Support
    Sophos Support Videos | Product Documentation  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.
Children
No Data
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?