Block CyberGhost VPN using App Control Advanced

Description

CyberGhost VPN is a VPN client used to bypass IDS/IDP systems. CyberGhost VPN can be blocked by SonicWall App Control Advanced using its OpenVPN application signatures.

This article describes how to block CyberGhost VPN In SonicOS.

    

Resolution for SonicOS 7.X

This release includes significant user interface changes and many new features that are different from the SonicOS 6.5 and earlier firmware. The below resolution is for customers using SonicOS 7.X firmware.

    CAUTION: The solution described here is not applicable if the traffic is over HTTPS. In order to be able to block these Facebook Apps, or any Apps, over HTTPS, Client DPI-SSL is required.

  1. Login to the SonicWall Management GUI.
  2. Navigate to  POLICY | Security Services | App Control
  3. Click Enable App Control
  4. Click Accept 
    Image
  5. Go to Signatures and in the Application select VPN and under Category select OpenVPN.
  6. Select Enable under the Block and Log fields
  7. Click OK.
    Image

     

Resolution for SonicOS 6.5

This release includes significant user interface changes and many new features that are different from the SonicOS 6.2 and earlier firmware. The below resolution is for customers using SonicOS 6.5 firmware.

 

 CAUTION: The solution described here is not applicable if the traffic is over HTTPS. In order to be able to block these Facebook Apps, or any Apps, over HTTPS, Client DPI-SSL is required.

  1. Login to the SonicWall management GUI.
  2. Navigate to the Firewall | App Control Advanced page.
  3. Check the box under Enable App Control
  4. Click on the Accept button at the top to enable App Control.
  5. Under App Control Advanced | View Style select INFRASTRUCTURE under Category
  6. Select OpenVPN under Application.
  7. Click on the configure icon under Application with OpenVPN selected.
  8. In the Edit App Control App window, select Enable under Block and Log.
  9. Click on OK to save
Image
Enabling App Control on zones
  1. Navigate to Network | Zones
  2. Click on the configure button under the zone where you want App Control enabled.
  3. Check Enable App Control Service.
  4. Click on OK to save.

Image

Related Articles

  • SonicOS 8.1.0 FAQ
    Read More
  • SonicWall GEN8 TZs and GEN8 NSas Settings Migration
    Read More
  • Getting started with SonicWall firewalls
    Read More
not finding your answers?