How can I block Psiphon VPN and others

Question

Hi guys, our organization uses defender for business.

Web content filter rule can be by-pass using a VPN (E.g Psiphon VPN or another VPN). So, we tried to block the VPN app via Defender for Endpoint portal using "Settings>Endpoints>indicators>Certificates. Unfortunately, the blocking can be bypassed again if we click "Allow" in the client machine's Defender, so the Psiphon VPN (portable version) is working properly. Pls let know the ways to block Psiphon VPN and others VPN.

Answer 1

Hello there,

Have you provided local admin rights to these users?

Taking away local admin from these users would be a lot easier and a better solution in the long run.

You can also avoid installation of these VPN or remove these applications from the devices.

Similar discussion here

https://techcommunity.microsoft.com/t5/microsoft-defender-for-endpoint/defender-for-endpoint-blocking-unsanctioned-vpn-connections/m-p/2119923

---------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept it as an answer--