Drop any VPN app

RouterOS General
1

Hi readers, how to drop any VPN applications if they’re using my network?
because I dropped some application like Facebook etc… and I need to drop all VPN applications

thanks

2

It’s not really possible. There is no real content filtering in RouterOS.

3

I disagree,

block all LAN to WAN traffic. :slight_smile:
only allow trusted users by IP address to use Internet…

There must be some way to limit bandwidth such that use of VPN makes things so slow its not tenable.

4

Yeah I’m not exact sure of the issue. If trusted IPs works, even better. But I read as trying to create a “no VPN policy”.


You can’t always identify a “VPN” in the firewall, to block or limit. IKEv2 sure, there is a standard for that. And blocking default ports for PPTP, OVPN, WG., etc., also possible too. But at the end of the day you have no idea what port WG (or any VPN) actually will use if it’s a client’s own VPN – many use non-default ports to avoid blocking :wink: So you can limit users only 80/443/etc., but SSTP/other are happy to run on 443.

This is no different than trying to block specific websites.

5

Yeah, I was being a tad sarcastic…