Thank you for ur reply.
In my opinion vpn app VS Mikrotik firewall-->Vpn wins 😔
Some VPN (PPtP & IPSec) use specific port and protocol,
Some other (L2TP, IKEv2, OpenVPN, Wireguard) only TCP or UDP ports
PPtP TCP 1723 & Protocol 47 GRE
IPSec UDP 500 & UDP 4500 & Protocol 50 ESP & Protocol 51 AH
L2TP UDP 1701 plus the same IPSec ports UDP 500 & UDP 4500
IKEv2 use same IPSec UDP 500
"OpenVPN UDP" use UDP 1194
Wireguard UDP 51820
Cisco VPN & IPSec: TCP 10000
Also EoIP, IP Tunnel (IPIP) and GRE tunnels used for VPN have the same port and protocol of PPtP
EoIP and IPIP can be used (MUST be used...) with IPSec for security
blocking that port and protocol the VPN can not be maded...
but other VPN like SSTP or "OpenVPN TCP" using TCP Port 443 HTTPS and are hard to block...