topic Re: Application Control can not catch Opera web browser VPN in General Topics

Application Control can not catch Opera web browser VPN

Gomboragchaa — Fri, 10 Aug 2018 10:13:03 GMT

Hello,

I am trying to block Facebook and any other social site from our internal network. Also we blocking all Anonymizer and Tunnels Application group.

But users are using Opera Web Browser's default VPN proxy extension. They surfing over internet.

Application Control has already Opera applications signature. Unfortunately Check Point can't catch the Opera VPN connections.

Rule on Firewall:

On Opera Browser:

Settings > Privacy & Security > Enable VPN

Result:

Next Step:

I did HTTPS Inspection on my PC. Finally Firewall detecting Opera VPN and rule working.

But we don't want to use HTTPS Inspection.

Danny — Fri, 10 Aug 2018 10:53:16 GMT

Just block these domains and you are fine:

Gomboragchaa — Fri, 10 Aug 2018 11:11:52 GMT

Unfortunately, still same

Danny — Fri, 10 Aug 2018 12:58:50 GMT

What is your SmartLog showing for the traffic that is permitted?

Gomboragchaa — Fri, 10 Aug 2018 13:32:02 GMT

No any logs on SmartLog...

Danny — Fri, 10 Aug 2018 14:07:45 GMT

Enable logging and also check via fw monitor for related traffic connections.

Gomboragchaa — Mon, 13 Aug 2018 07:35:21 GMT

I used fw monitor on our firewall.

From src=192.168.0.172 to dst=77.111.245.14.

I think it is Proxy server IP. The it sending packet to Facebook.

I blocked 77.111.245.14 IP on rule. But it connecting another IP.

Sorry for my poor English

Gomboragchaa — Mon, 27 Aug 2018 15:23:35 GMT

Found a solution.

1. Activate “Categorize HTTPS websites” option from Application Control and URL Filter blade advanced settings.

Open Smartconsole > Manage and Settings > Blades > Application Control & URL Filter "Advanced Settings" > Activate “Categorize HTTPS websites”

2. After changes, it isn’t affect immediately and must to wait or clear connection table. But I prefer the reboot