Note: The L7 matcher is very resource intensive. Use this feature only for very specific traffic. It is not recommended to use L7 matcher for generic traffic, such as for blocking webpages. This will almost never work correctly and your device will exhaust it's resources, trying to catch all the traffic. Use other features to block webpages by URL
/ip proxy access
вот и я думаю, как их безопасно соединитьну, PPTP давным давно поломан, имеет кучи уязвимостей и, в чистом виде, с безопасностью не имеет ничего общего.