block psiphon application on source fire.

[chawkideeb]

Dears,

I have a firewall with software source fire.

license : ips + application + url filtering

i blocked everything related to facebook , youtube , some vpn ,etc... and all is okey.

There is an application ( PSIPHON) that users install it on their mobile and on their laptops or PCs .And through this application they can open facebook,youtube,etc...

All users are using it and bypass the Firesight rule.

https://psiphon.ca/en/download.html

this application will open a VPN session through the internet and it is available on android and now as a portable version for windows desktop.

Do you have any idea oe a step-by-step  on how to stop the above application?

thanks in advance...

please send me the answer on chawki.dib@bmbgroup.com

Best Regards,

Chawki Dib

[rejeeshnellikkal]

Hi All,

Anybody got a solution for blocking psiphon 3.My current VDB is 276.Still i am not able to block.

[chawkideeb]

Dear rejeeshnellikkal  ,

the cisco TAC case still opened from my side and I am liaising with the Tac engineer.

As per him, the CSCuz55318 is scheduled to be fixed in a new release.

he will let me know the excat release.

we need just to wait.

I will inform you once done.

thank you.

chawki dib

[rejeeshnellikkal]

Dear chawki,

Thanks for your update and waiting for the solution.

Regards,

Rejeesh

[romarroca1234]

Hi sir Chaw,

Do you have the update for this? We are planning to buy control license for application blocking but we need to verify if it is already possible.

Thanks and regards,

Romar

[chawkideeb]

Dear Romarroca,

from my side all is okey.

I can block facebook twitter youtube,etc...except psiphon.

the Cisco TAC told me that this is a bug and that cisco developpers are working on.

we should wait till the next VDB update to install it and try it.

my current VDB is 271

best Regards,

Chawki Dib

[romarroca1234]

Thanks mate for the respond.

May I ask how do you manage FirePower? is it via FireSight Defence Center? Im managing via ASDM and I cant see to update the ULR filtering updates. and I cant also block Youtube via URL category under streaming media.

We don't have yet the application blocking. if it will block psiphon3, we might get additional license.

Thanks and regards,
Romar Roca

[chawkideeb]

Dear ,

I am using the firesight GUI interface and not the ASDM.

you can block the URL by typing the URL directly in the rule without creating URL in URL category and then add it to the rule.

best regards,

chawki dib

[romarroca1234]

Thanks for the info,

Hope they get to block Psiphon.

Btw, please do remind us whenever the next VDB succeed to blocks Psiphon3.exe

Thankd and regards,

Romar

[Narasimhan VS]

Hi All,

I am following this issue from couple of months wherein there is no bug fix from Cisco side related to Psiphon application. 

In one of our customer place they are using Cisco FTD with FMC 6.2 version. Here also this application could not be able to block and we had raised a TAC case with Cisco. Cisco engineer has informed that this is a bug and the ETA is not known. 

Please let me know if anyone has any workaround to block Psiphon traffic.

Regards,

Narasimhan 

[EtsegenetFekade53381]

What does VDP MEAN?

[chawkideeb]

Dear,

please find attached the version that i should update to?

please confirm

[yogdhanu]

Yes that should be right.

Rate if helps.

Yogesh

[KhaledGamal]

Dear ,

Can you please share the updates with us ?

Thanks.

[melissaclarke]

Well Psiphon is a good VPN app. I had some issues while connecting to the server. Then I installed this VPN app. Installing this helped to resolve such kind of connecting issues as Psiphon runs in the background and we are able to access restricted sites as well. I downloaded it from the official site and incase you need help to stop the above application you may seek this guide on Psiphon.