VPN

Follow

Joel Zimmerle

• October 10, 2019 03:29

Any plans for detecting vpn traffic and being able to block access? Obviously running a vpn on a client nullifies much of what Firewalla can do blocking wise..thanks!

0

• 

  Firewalla

  • October 10, 2019 22:51

  On our priority list for sure.  

  0

  Comment actions Permalink
• 

  Ben Griffith

  • February 01, 2020 01:58

  +1 on this. I was going to start a thread but I'll just vote on this one. A default blocking category (similar to video or 18+, etc) would be great, then we can just add to them as the kids find out ways around it.

  0

  Comment actions Permalink
• 

  Firewalla

  • February 04, 2020 23:06

  The implementation will likely be a warning first, then you can pick the action.  The reason is, detecting VPN is extremely tricky, false positives gonna be difficult to debug

  0

  Comment actions Permalink
• 

  Ben Griffith

  • February 05, 2020 00:14

  ...agreed. It is a cat and mouse game. However, I feel that 'custom categories' that would allow us as device owners to collect lists of domains into one main rule (similar to the video, 18+ etc) would be welcome. The list could default ship with many of the known VPN sites and then we could add/remove them as necessary.

  0

  Comment actions Permalink
• 

  Dirk Zwart

  • April 29, 2020 16:03

  My kids school devices essentially VPN to school so they can be monitored. The school allows YouTube, which is good for distance learning, but at some points is distracting. Not trying to replace parenting with technology, trying to use tech to help me know where and when to offer guidance. Also knowing when they fire up a VPN connection on thier phone or other devices would be nice.

  1

  Comment actions Permalink
• 

  Matt Smith

  • May 07, 2020 14:39

  It seems like the "Port Block" feature only blocks incoming connections on those ports not outgoing, so I'm guessing blocking the typical ports used with VPN wouldn't help, correct?

  0

  Comment actions Permalink
• 

  Tommy M Webb

  • May 07, 2020 14:55

  Matt,

   

  What ports would you block?  Some VPN services use HTTPS.  You can't block that one but the other VPN specific ports you can.

  0

  Comment actions Permalink
• 

  Matt Smith

  • May 07, 2020 15:49

  Yeah, can't block 443 (HTTPS), but could block 500, 1701,1723, & 4500.

  0

  Comment actions Permalink
• 

  Joel Zimmerle

  • May 07, 2020 16:16

  Unfortunately, wifi calling uses some of those vpn ports above so if you use that that complicates things a bit. I think what would work best is a notification of possible vpn activity, by activity on those ports, large download from one anonymous IP etc then let us decide what to do with it. 

  0

  Comment actions Permalink

Please sign in to leave a comment.