Re: Blocking Psiphon

[Y M via Snort-sigs <snort-sigs () lists snort org>]

Psiphon, and other VPN-like apps have OpenAppID defined. You can use these AppIDs to block their associated traffic.

Here is a recent pfsense and AppID video/tutorial.

https://youtu.be/-GgqYq5-EBg

Note: the video is not mine, all credits go to the presenter.

_____________________________
From: Syed Anas via Snort-sigs <snort-sigs () lists snort org>
Sent: Sunday, April 1, 2018 5:19 PM
Subject: [Snort-sigs] Blocking Psiphon
To: <snort-sigs () lists snort org>


Hey ! I am using snort on my pfsense and i want to block Psiphon and all vpn tunneling devices.Can snort do that for me 
?


_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists snort org
https://lists.snort.org/mailman/listinfo/snort-sigs

Please visit http://blog.snort.org for the latest news about Snort!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette

Visit the Snort.org to subscribe to the official Snort ruleset, make sure to stay up to date to catch the most <a 
href=" https://snort.org/downloads/#rule-downloads";>emerging threats</a>!