How to block Squid Proxy using Application Control?

Hi,

you create policy blocking proxy and tunnels. There is a category already in the XG, you need to add it to your application policy and it will need to be in every firewall rule that the users have access to.

Ian

I did some packet inspection, and Hoxx VPN is connecting to some unknown addresses. It uses TLS v1.3. When I checked the address in Sophos, it showed up in the "Content Delivery" category.

I did some packet inspection, and Hoxx VPN is connecting to some unknown addresses. It uses TLS v1.3. When I checked the address in Sophos, it showed up in the "Content Delivery" category.

You could try creating FQDN group with hoxx.com and *.hoxx.com and then create a rule at the top of your rule list as a block to this FQDN group. I was unable to find a server list for the app. The security rating on hoxx.com is not great so a DNS block might just work?

You might also need to block browser extensions.

Ian

I downloaded the app to my mac book, apple blocked the installation as untrustworthy, though that can be bypassed and the I tried the firefox extension but that would not install on my firefox app.

The problem with Hoxx is that it uses some random URLs to connect. Submitted a request to Sophos using the "Application Control Submission".