topic port blocking in ZoneDirector

port blocking

brad_wilcox_ibp — Tue, 13 Nov 2018 20:28:28 GMT

K-8 school here trying to block students using VPNs: could be apps or websites, on either Chromebooks or phones. Our content filter, iBoss, is not good in this area, only offering to block five ports. I want to block lots more, hoping to catch not all but the majority of ports commonly used by VPNs. I think ZD can do this in configure>access control. But which section? L2? L3/4? "Application Denial Policy"? See two attached screenshots.

Re: port blocking

craig_burchfiel — Tue, 13 Nov 2018 20:59:50 GMT

VPNs work at the Layer 2 level.

Re: port blocking

brad_wilcox_ibp — Tue, 13 Nov 2018 21:14:34 GMT

Alas, no provision to deal with ports in L2 section. Plus specifying MAC addresses won't be do-able.

Re: port blocking

max_o_driscoll — Mon, 26 Nov 2018 23:52:52 GMT

Network protocol 115 will give you L2TP access control deny/allow possibilities. So use that in protocol number. Other comments in recent email.