Blocking VPN sites

Follow

Siva Alagarsamy

• March 10, 2021 23:39

Is there a way to block VPN sites that only go by an IP address. There are some VPN clients that makes HTTP or HTTPS connections to VPN servers that only go by IP address. With this, the Firewalla is failing to block these connections. Is there a easy way to write a rule that if there is any HTTPS or HTTP connection that is open for too long and has lot of bandwidth usage, block it?  Another approach will be to block any HTTP/HTTPS connection to server that doesn't has a valid DNS record. 

0

• 

  Firewalla

  • March 11, 2021 06:44

  The idea is good, this belongs to active VPN detection, which we probably can do if people care about it.  

  One thing you can do very easily is tap on the top graph (on the main screen) sort by download and usually, you can find VPN connection that way. (either sort the network flows by upload or download)

  0

  Comment actions Permalink
• 

  Siva Alagarsamy

  • March 11, 2021 16:39

  Having a feature to detect active VPN connection will be very useful for me. I mainly bought firewall to block gaming and social media websites and with the VPN connections, all firewall rules that I put in are bypassed and it is not doing any good.  

  Thanks

   

  1

  Comment actions Permalink
• 

  atif.ahmad

  • June 20, 2021 20:30
  • Edited

  This feature would be awesome. Would love to have it. Solves many issues. . 

  0

  Comment actions Permalink
• 

  Firewalla

  • June 21, 2021 01:22
  • Edited

  VPN is fairly tricky since, by nature, it tries to hide. The standard port like 1194 is very useful. And if the port can't be identified, you can examine the network flows, usually, if you sort them by upload or download, they come on the top. 

  (some what like this https://help.firewalla.com/hc/en-us/articles/360050863873-How-to-block-an-application-using-Firewalla-Network-Flows-)

   

  0

  Comment actions Permalink
• 

  Dave Johnson

  • December 14, 2022 17:54

  Looks like this is a BETA feature - that is awesome. Can it be set up to alert when someone attempts to use a private VPN tunnel, or does it just get logged?

  0

  Comment actions Permalink

Please sign in to leave a comment.