Add proxy sites to categories for blocking
I have students finding all kinds of proxy sites to get past blockages, but there is no category for all these.
Thanks for your request! We just added another 3000 proxy sites to our blacklist. However, we also realize that proxy mirror sites are being added daily, so we are working on a way to automatically categorize new proxy sites that students visit as well as improving flagged activity so that even if a student is using a proxy, we are giving you insight and awareness about what they are doing.
Antony Street commented
If you filtered URLs using the regular expressions documented at https://www.sans.org/reading-room/whitepapers/detection/detecting-preventing-anonymous-proxy-usage-32943 you could remove a lot of them including many not listed and any new ones of their type.
how about letting the students be themselves hm?
Here is an article we wrote to elaborate on using wildcards for use cases like this one!
Tom Wilson commented
Can you elaborate on the "Proxy wildcard" you mention and how this would be entered?
Karl Langer commented
I do have all categories of malicious sites being blacklisted. But when I blacklist a site, I can only use the main categories—you guys have to review all of them?
There are some sites which might not look like proxies: