Any mid-range / price firewall solution is capable of effectively blocking most VPN solutions. Both OVPN and Wireguard VPN traffic is trivial to identify as such and block. Here's an example and another.

Btw, I’ve never seen something like that, my VPN worked even in China, and that must mean something…

China's great firewall works a little bit differently. They aren't actively blocking certain kinds of traffic by default because that would mean a large DPI effort they don't want to undertake. Also if you google a bit about it you'll find that people's experiences are mostly "my VPN worked fine for a day/week/month and then it was blocked". It seems they've some IPs and domains blocked and the rest is some kind of machine learning that applies rules as it sees fit, this guy here has a good analysis of it.

[+] NoLifeKing@ani.social 0 points 1 year ago* (last edited 8 months ago) (1 children)

[deleted]

[–] TCB13@lemmy.world 4 points 1 year ago (1 children)

As said, I’ve never seen a network that even tried to block any kind of VPN, and i have seen numerous networks… I kinda built them even. Good, i don’t think anyone outside of a clownshow authoritarian circlejerk would even try to do that.

All the serious companies (financial sector) I worked for so far did it, because as I linked is really easy with any cheap firewall solution.

clownshow authoritarian circlejerk

Well... a bank could be considerar that indeed, but you know, security concerns and all.

VPNs are very very necessary when you work with sensitive data in BtoB, wanna do remote checkup of a server? You better use a fucking VPN or you aint getting in.

So what? A company can use a firewall to block VPNs when the target IP isn't on some whitelist, or the source computer isn't authorized to use VPNs. On those high security setups at banks and whatnot client machines inside the company network won't need to touch a VPN to do a "remote checkup of a server" at some cloud provider as the network will be configured to internally route the traffic from all computers / users (backed by SSO/AD credential) to access those resources via a special VPN setup on some router / server.

Wanna help someone over TeamViewer? Thats not much different from a VPN…

Fortinet and WatchGuard can both distinguish a VPN from TeamViewer. They can actually do much more than that, even TeamViewer from RDP or VNC is just a couple of clicks on their UIs.