https://community.ruckuswireless.com/t5/To-Be-Moved/Blocking-outbound-VPN-traffic/m-p/7159#M361 cant see any reason why this wouldn't work using application denial policy. Fri, 06 May 2016 06:46:49 GMT robert_lowe_722 2016-05-06T06:46:49Z https://community.ruckuswireless.com/t5/To-Be-Moved/Blocking-outbound-VPN-traffic/m-p/7158#M360 We are a school with some pretty smart students! A few are trying out using a VPN to bypass our firewall content filtering system. I'd like to block that connection attempt at the access point. My thinking is to deny traffic using an Application Port policy tied to 1723. Has anyone done so successfully?&nbsp;<BR /><BR />Thanks... Tue, 03 May 2016 16:20:45 GMT https://community.ruckuswireless.com/t5/To-Be-Moved/Blocking-outbound-VPN-traffic/m-p/7158#M360 sheldon_lefkowi 2016-05-03T16:20:45Z https://community.ruckuswireless.com/t5/To-Be-Moved/Blocking-outbound-VPN-traffic/m-p/7159#M361 cant see any reason why this wouldn't work using application denial policy. Fri, 06 May 2016 06:46:49 GMT https://community.ruckuswireless.com/t5/To-Be-Moved/Blocking-outbound-VPN-traffic/m-p/7159#M361 robert_lowe_722 2016-05-06T06:46:49Z https://community.ruckuswireless.com/t5/To-Be-Moved/Blocking-outbound-VPN-traffic/m-p/7160#M362 If your students are truly sophisticated, you may need a more advanced deep packet inspection firewall, or a traffic shaper that's capable of throttling down long-lasting connections to oblivion....<BR /><BR />Modern VPN technology often is based off SSL VPN which looks almost identical to HTTPS traffic and can even be operated on port 443. Sun, 08 May 2016 06:10:06 GMT https://community.ruckuswireless.com/t5/To-Be-Moved/Blocking-outbound-VPN-traffic/m-p/7160#M362 john_d 2016-05-08T06:10:06Z