If your students are truly sophisticated, you may need a more advanced deep packet inspection firewall, or a traffic shaper that's capable of throttling down long-lasting connections to oblivion....
Modern VPN technology often is based off SSL VPN which looks almost identical to HTTPS traffic and can even be operated on port 443.