Hotspot Shield

[yasdnil]

Hi, we use Wingate at a small school environment and have discovered students are using Hotspot Shield to bypass Wingate altogether. I'm curious if there is a way that Hotspot Shield can be blocked?

Thanks!


Lindsay

[adrien]

Hi

It should just be a matter of finding out what the IP address(es) is/are of the Hotspot shield servers and banning them (or blackholing them). That will prevent the VPN working for the clients.

The VPN tunnels should be showing up in GateKeeper. From that you should be able to see the IP address of the VPN servers they are connecting to.

Regards

Adrien

[labull]

Lindsay,

Additionally you could point your external DNS to OpenDNS to provide added security. I believe OpenDNS already blocks access to anchorfree.com where Hotspot Shield is hosted.

There are also many other benefits to using OpenDNS in a school environment that I think you'll find helpful.

Check them out at opendns.com.

Larry

[labull]

Did some more searching and found this discussion.

discussions.apple.com/thread.jspa?threadID=1893850&tstart=14

The main thing I've found in testing is that if you have outbound UDP ports blocked by default you'll prevent the VPN connection.