Block All does not block everything ???

[Tassos Seperis]

Hi. I've created a policy to block all and block unclassified domains as well. However the user who i assigned this policy is still able to use tiktok app from his mobile and also play app games that are connecting to internet, from his mobile.

Shouldn't block all and block unclassified domains basically cut internet entirely ???

Thanks

[Jahastech]

See if your user uses NxFilter as his DNS server. With smartphone, you can use 4G. Then you bypass your network. It's in a diffrent network.

[Tassos Seperis]

Yes, user is using nxfilter as dns. Mobile has only access to the wifi. Mobile (3g/4g) connection is not available. Many things are blocked with this policy, for example normal browsing and youtube, but tiktok and some app games (that use internet to play) still work.

[Jahastech]

And you see all the logs from the users blocked on 'Logging > Request'? Then they might be using IP addresses. You have to block it on firewall level.

[Tassos Seperis]

No, nothing is logged for these apps, which makes your point stronger, even though it's really strange for an app not to use dns these days.

Out of curiosity, since tiktok is very famous social network app, have you tested it if it's blocked via nxfilter ?

[Jahastech]

No. We didn't test it. We are stay away from these apps from a specific country.