Cisco FirePOWER Security Intelligence

[dosadaubija]

Is there a way to protect my internal network resources from "browser vpn" connections, like Opera VPN with Cisco FirePOWER services? Maybe with Security Intelligence upgrade?

Sec.Int. has "Open_proxy" category but these connections are passing without any problem.

How can I investigate an attack when source IP address is masked?

[Kristian Mattocks]

Have you tried doing a packet capture whilst opening one yourself and then analyse the packets to see if there is something you can add to an acl to have dropped.