Lightspeed and Hotspot Shield

[deano3693]

We are facing the same issue, with X-VPN now... Is it ok if I send you a PM?

 

Many thanks!

 

XVPN is more of a challenge. I have sent you my list of URL's and also the additional settings i was advised to apply by Lightspeed and we've now succesfully managed to block XVPN.

[BohuntIT]

Thank you so much for your help, Dean.

This looks like it will be a neverending fight.

[mavhc]

So the problem is these vpn like systems use https on port 443 and then proxy the traffic inside that connection? And https inspection doesn't work because there's too many domains to block? Wouldn't it be easier to just tell the students that anyone using them will be blocked forever?

[deano3693]

So the problem is these vpn like systems use https on port 443 and then proxy the traffic inside that connection? And https inspection doesn't work because there's too many domains to block? Wouldn't it be easier to just tell the students that anyone using them will be blocked forever?

 

We tried this as we could tell from the logs who was using them but SLT having to chase 14-15 students a day wasn't worth the agro! I then ended up having to chase them down and agreed so ended up spending days blocking every little URL/Port that i suspected was being used until it was no longer working! Touch wood we still appear to be VPN free.

[mavhc]

Block the students, then wait for them to come to you. Or block them for 1 day the first time, and double it each time

[prfsys]

We are having the same issue. I'll PM deano3693 for list to block.

[enjay]

Lightspeed's latest version includes proxy bypass detection, which includes the ability to impose a 10 minute block on devices using them.

[ant3520]

I don't suppose you have a list of the URLs toblock X-VPN to hand do you? Or any other method you are using to block X-VPN?

[jhothersall]

I would go a HTTP Traffic track on the device's traffic, that should help.