SonicALERT
Search

Sonicwall Signatures

 

Go to All Categories list.


  Hotspot Shield VPN -- TCP Activity 3 [Reqs SIDs 5, 7]

Category: VPN      

Hotspot Shield is an application service that provides web users security and anonymity by creating a virtual private network between a laptop or mobile device and an Internet gateway. This tunnel prevents others from viewing email, instant messages, credit card information or other web transmissions sent over the network, as these transactions are all secured through HTTPS. Owned by Anchor Free, Inc., the Hotspot Shield security application is free to download. This application uses advanced obfuscation and evasion techniques to avoid firewall detection, and required that random, unidentified protocols be disabled for TCP and UDP using the Encrypted Key Exchange application signatures, SID 5 and SID 7, respectively, as well as enabling these Hotspot Shield VPN signatures. (Note: there may be side effects to enabling EKE signatures, namely, applications like Skype and others may also be blocked. There is no work-around, other than adding private IPs to the exclusion lists for this application, or individually by EKE signature.)

This SonicWALL signature identifies legitimate Hotspot Shield traffic.



Relevant Information