Virtual Event: Threat Detection and Incident Response Summit - Watch Sessions
Connect with us

Hi, what are you looking for?


Network Security

Iran Continues to Lockdown Internet Access – Blocks VPN Access

Iran has blocked VPN traffic within its borders, preventing its citizens from accessing domains and Web content outside the firewall established by the Ministry of Information and Communications Technology.

Iran has blocked VPN traffic within its borders, preventing its citizens from accessing domains and Web content outside the firewall established by the Ministry of Information and Communications Technology.

The lockdown seems to be a pre-emptive measure, aimed at preventing Web-based protesting ahead of June’s elections, while pushing users towards state run VPN access. In June, Iran will hold the first presidential election since 2009. Those elections led to the creation of the Green Movement, due to the fact that the populous wasn’t too pleased with the way the election was being handled, nor were they all that happy with the results.

In 2009, the Green Movement’s use of the Internet to spread information on brutality and alleged election fraud prompted the government’s resurgent push for strict Internet controls. Earlier this year, in January and February, many domains within Iran (music blogs, dating sites, and movie and software download portals) were subjected to increased censorship and takedown orders by the Ministry of Information and Communications Technology. Even sites previously approved by the Ministry of Culture and Islamic Guidance were cutoff from the Web.

According to Mehdi Akhavan Behabadi, Secretary of the Supreme Council of Cyberspace, all VPNs on the market are illegal in the Islamic Republic of Iran. Soon, Internet users will be able to purchase state-approved VPN access, but until then the only legal VPN connection is one that has been deemed “legitimate” by the Ministry. Further, the VPN provider has to be registered on, which isn’t available to Internet traffic outside of Iran due to the domain’s use of a national private network.

“In the next three months, Internet filtering will begin to occur more frequently based on content, and not against whole domains or websites,” the U.K.’s Small Media Foundation explains in a report on Iran’s Internet policy.

“The government will begin sponsoring domestic hosting services for websites, including through decreasing costs at national data centers, and providing other incentives to encourage administrators to move their hosting to a domestic location. This push will begin with news sites and move to others progressively.”

“As the June election approaches and the internal politics of the government becomes more continuous,” the report continues, “Iran’s Internet connectivity, and the accessibility of uncensored information, continues to deteriorate, reflecting offline crackdowns on the press.”

Advertisement. Scroll to continue reading.

“Prominent Persian language websites and other online services have been filtered one by one, and communications with external platforms is becoming progressively more difficult.”

Sources within Iran for SecurityWeek can confirm that VPN access within the country has been severed. They confirm the reports issued by local media, and the sources used by Reuters in their story on Iran’s VPN data. However, access to some social networks and communication channels (such as IRC), are available in a limited capacity. The use of external dial-up has also been an option, but not for many. 

Written By

Click to comment

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

SecurityWeek’s Threat Detection and Incident Response Summit brings together security practitioners from around the world to share war stories on breaches, APT attacks and threat intelligence.


Securityweek’s CISO Forum will address issues and challenges that are top of mind for today’s security leaders and what the future looks like as chief defenders of the enterprise.


Expert Insights

Related Content

Identity & Access

Zero trust is not a replacement for identity and access management (IAM), but is the extension of IAM principles from people to everyone and...

Cybersecurity Funding

Network security provider Corsa Security last week announced that it has raised $10 million from Roadmap Capital. To date, the company has raised $50...

Identity & Access

Hackers rarely hack in anymore. They log in using stolen, weak, default, or otherwise compromised credentials. That’s why it’s so critical to break the...

Network Security

Attack surface management is nothing short of a complete methodology for providing effective cybersecurity. It doesn’t seek to protect everything, but concentrates on areas...

Network Security

NSA publishes guidance to help system administrators identify and mitigate cyber risks associated with transitioning to IPv6.


Websites of German airports, administration bodies and banks were hit by DDoS attacks attributed to Russian hacker group Killnet

Cybersecurity Funding

Los Gatos, Calif-based data protection and privacy firm Titaniam has raised $6 million seed funding from Refinery Ventures, with participation from Fusion Fund, Shasta...

Application Security

Fortinet on Monday issued an emergency patch to cover a severe vulnerability in its FortiOS SSL-VPN product, warning that hackers have already exploited the...