Prohibiting the use of proxies

[trytkonen]

Hi!

We're running fw-1 R55 at the moment and I have one question. Is it at all possible, using the Firewall-1, to make a rule that prohibits our users to use external, public proxies?

Thanks in advance,
Tommy

[intehnet]

they can run these on any port really, so it's hard to trap without blocking everything
don't allow them outbound of any port, force them to use an internal proxy on port 8080 for their http connections, and make it do SSL tunneling.
you shouldn't need ANY ports outbound open unless for special requirements of the user, such as SSH outbound, or FTP, etc.

[charlesdf23]

We had the same issue/concern and the only thing that we could find that could block that was Surfcontrol/Websense type products.