anyone know how to block Hotspot shiled?
Ahh, those VPNs: TL’DR to block those VPNs: use Web Filter category: Proxy Avoidance and App Control category: Proxy.
However, do note that there are cases it does not work if you do not have SSL Deep Inspection i.e., Decryption enabled. Due to how these applications use HTTPS. You’ll be dependent on how fast Fortinet update their signatures everytime these VPNs release an update if that’s the case.
Depends you might be able to use the application control. If you guys are using Chrome as the default Browser you can download cab files to add to Group Policy and then block extensions from their as well.
In addition to the great recommendations already posted, don’t forget that you can leverage the “VPN-Anonymizing.VPN.Server” and “Proxy-Proxy.Server” ISDB objects as well. May not specifically target “hotspot-shield”, but could definitely help with blocking that type of application in your environment.