Help with Blocking Firstly Seen Sites

[pSych0bUNny]

Kia ora,

It may be my misunderstanding however I think I have blocked all 'Firstly Seen Sites' (Policies > Security > "High Control")...

ref attached - zen_blockedSite

...however Zenamour still allows these...?

ref attached - firstSeen

Why are these sites allowed?
They are random URLs created by Proton VPN - I would like to block them.


OPNsense: 26.1.5
Zenamour:
Engine: 2.4.2
DB: 2.0.26033110
Agent: 2.4.1
UI: 2.4.32
License: FREE

[sy]

Hi There, 
 
Thanks for reaching out and bringing the issue to our attention.

Could you please provide the logs and configuration by following the steps outlined in the link below? I kindly request that you select all checkboxes. 
https://www.zenarmor.com/docs/support/reporting-bug
 
 
Best regards,

[pSych0bUNny]

kia ora - not entirely comfortable that the whole /conf/config.xml is shared, which contains OPNsense secrets/passwords and private cert keys.

How is this file transmitted?
How do I know it's secure and being stored securely for support?

[sy]

Hi,

Thank you for sharing your concern.

Please be assured that all sensitive data is automatically stripped from the config.xml file before being included in the report. Consequently, the shared files do not contain any confidential or private information. Our automated sanitization process ensures that your security and privacy are maintained at all times. If you have any further questions please feel free to reach out.