Blocking Cloud Providers Private Tunnel

[gemechis]

Recently, we have seen an issue where some device having an internet connectivity estbalished a tunnel with cloudflare and do access internal systems which are private and only accessed through LAN network. And he did access the system from public through cloudflare tunnel.

Is there any checkpoint could identify this things? As we have  checkpoint on the perimeter. And we are worried that there also other cloud providers who could offer this kind of future.

[PhoneBoy]

To potentially detect this sort of thing, you’d need App Control and possibly HTTPS Inspection configured.
Not sure what Cloudflare service does what you describe.