Application Control can not catch Opera web browser VPN

[Gomboragchaa]

Hello,

I am trying to block Facebook and any other social site from our internal network. Also we blocking all Anonymizer and Tunnels Application group. 

But users are using Opera Web Browser's default VPN proxy extension. They surfing over internet.

Application Control has already Opera applications signature. Unfortunately Check Point can't catch the Opera VPN connections.

Rule on Firewall:

On Opera Browser:

Settings > Privacy & Security > Enable VPN

Result: 

Next Step:

I did HTTPS Inspection on my PC. Finally Firewall detecting Opera VPN and rule working.

But we don't want to use HTTPS Inspection. 

[Danny]

Just block these domains and you are fine:

• api.surfeasy.com
• de0.opera-proxy.net
• api.sec-tunnel.com
• sitecheck2.opera.com
• opera-mini.net

[Gomboragchaa]

Unfortunately, still same

[Danny]

What is your SmartLog showing for the traffic that is permitted?

[Gomboragchaa]

No any logs on SmartLog... 

[Danny]

Enable logging and also check via fw monitor for related traffic connections.

[Gomboragchaa]

I used fw monitor on our firewall.

From src=192.168.0.172 to dst=77.111.245.14.

I think it is Proxy server IP. The it sending packet to Facebook.

I blocked 77.111.245.14 IP on rule. But it connecting another IP.

Sorry for my poor English

[Gomboragchaa]

Found a solution.

1. Activate “Categorize HTTPS websites” option from Application Control and URL Filter blade advanced settings.

Open Smartconsole > Manage and Settings > Blades > Application Control & URL Filter "Advanced Settings" > Activate “Categorize HTTPS websites”

2. After changes, it isn’t affect immediately and must to wait or clear connection table. But I prefer the reboot