All the software VPNs are a nightmare.
LightSpeed have offered suggestions, but none of them work. To be honest, I don’t think they know how to stop them.
We had to block update.microsoft.com on our BYOD system as Hotspot Shield spoofs this address. They also use dynamic IP addresses, so you would be there for days blocking all the IP addresses, only for them to change again..
It is not just Hotspot Shield, there are hundreds of these things all designed to bypass any security and filtering you have in place. Our pupils change the VPN they use every few days to try and stay one step ahead of us.
I just want a solution that stops them, but still allows Skype, etc so our overseas pupils can still contact home.