@ZDonaldson I also did this from the network side, but some VPN apps could still tunnel out if it got past the block. Luckily all of our devices are managed my Meraki MDM (Meraki SM), I created a policy on my end that looks for any apps that contain anything to do with VPNs, Proxy, Annomizer, Etc. and then have it alert me on compliance. The user will loose access to must of the functionality until they remove the VPN and see me (or wait until the device checks in and remove the VPN profile making it compliant). I know Meraki MDM (SM) offers PC managment, might be something to think about for the future.
... View more