1/2
VPN blocking

xonivre Lv1  Posted 2026-Sep-26 15:20

Hello Sangfor Expert,

I need assistance with blocking VPN usage for our LAN users.

I created an Application Control policy with the following configuration:

Source Zone: LAN
Source Address: Our LAN network
Destination Zone: WAN
Destination Address: All
Application: Proxy Tool
Action: Deny

However, users are still able to access the Internet using Proton VPN and other VPN applications.

Could you please advise me on the recommended configuration for Sangfor NSF-1100A-I to effectively block VPN applications and prevent users from bypassing our Internet access-control policies?

Any guidance regarding the appropriate application categories, services, protocols, or additional policies that should be configured would be greatly appreciated.

Thank you for your assistance.

By solving this question, you may help 1022 user(s).

Posting a reply earns you 2 coins. An accepted reply earns you 20 coins and another 10 coins for replying within 10 minutes. (Expired) What is Coin?

Enter your mobile phone number and company name for better service. Go

Andre Agave Lv1  Posted 2026-Sep-26 22:28
  
For effective VPN blocking on NSF-1100A-I:
✅ Block all VPN-related application categories, not only "Proxy Tool"
✅ Enable SSL Inspection / SSL Decryption
✅ Block common VPN protocols (OpenVPN, IPSec, PPTP, L2TP)
✅ Keep Application & IPS signatures updated
✅ Review traffic logs to identify undetected applications
✅ Integrate with Endpoint Secure for advanced anti-VPN protection
If Proton VPN is still bypassing the policy after these recommendations are applied, please provide:
•NSF firmware version
•Screenshot of the Application Control policy
•Application Control logs when Proton VPN is connected
•Traffic log entries for the VPN session
We can then verify whether the traffic is being identified under another application signature or requires additional SSL inspection configuration.

I Can Help:

Change

Moderator on This Board

1
159
3

Started Topics

Followers

Follow

1139
247
101

Started Topics

Followers

Follow

Board Leaders