03-28-2018 06:15 AM - edited 02-21-2020 07:34 AM
I observed the usage of "Hotspot Shield" on some PCs on the network.
When checking the connection events, such traffic appears as "Hotspot Shield"in the "Web Application". Installation of the application/browser extension on that client PCs has been confirmed.
However, a traffic of "Hotspot Shield" in the "Application Protocol" and "Hotspot Shield client" in the "Client"with a blank record in the "Web Application" appears frequently on many PCs. When checking some of that PCs for application/browser extension, we found they are clean!
Any explanation/advise?
Cisco ASA5525-X Threat Defense High Availability
Cisco Firepower Management Center for VMWare 6.2.2.1 (build 73)
04-05-2018 01:41 AM
Bump up.
Having the same issue. Upon checking PCs Hotspot Shield isn't even installed.
Any thoughts?
05-16-2018 06:53 AM
Has Cisco ever commented on this issue? We're having the same issue here. App is being detected and the clients are clean.
05-16-2018 07:00 AM
We've not contacted them yet. I've blocked all VPNs and Proxies at Firepower but Hotspot is still popping up with quite a large number of connection events.
Put it on hold for now.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: