Usually yes. A very generic solution to block these kind of connections is to enable SSL Scanner as the certificate validation might block most of these tools.
Additionally, display a coaching page if user accessing an uncategorized site or a URL with IP address only.
I´m trying to prove but i can´t stop the connection.
You know any document that explain how to do, or It´s possible to know any other examples similar that this case for control.
I know the address against witch down the tunnel to bypass the filter, this case is 220.127.116.11/24
Thanks for your help