Ok, I will type slower.......I want to block... ANY... "Remote Access/ VPN Client" website.  Instead of putting all of the URL's like.....logmein, teamshare, realvnc, showmypc, gotomypc, screenconnect, splashtop, ultravnc, anydesk, and the hundreds more that we don't know about into Layer 3 and then finding and adding their ports.  Which some use 443 which is a no go on blocking.  Is it possible to block these types of sites with the filter, rule, or category, anything? ... View more

If I were to use FQDN, as you suggested, then we would have to find every destination (URL) and all their different ports to add.  I work in education, deploy 2500 devices, and trust me students/faculty will find a URL that maybe we would miss.  This method doesn't seem to efficient to me.  I'll put in the leg work, but my question was can this be done with, say a Layer 7 category denial.  Like Remote monitoring and management?  That way it is a blanket for these website and we don't have to input each new URL that comes out.     I actually researched this question, in the community, and your suggestion to someone else was to check Proxy Avoidance and Anonymizers in the Category Filter.  We have had that category blocked and it didn't work.   ... View more