topic block ultrasurf (https) through webpage translation category?? in Web Security

block ultrasurf (https) through webpage translation category??

meijerivo — Fri, 29 Mar 2013 08:48:01 GMT

Hi,

Does anyone have experience with blocking Ultrasurf that users use to bypass the WSA proxy??

I was wondering if it is part of cursom categories.

If not, would it be possible to bypass this with decrypting https and use a regex?

An example or advise would be appreciated.

Ivo M

meijerivo — Fri, 29 Mar 2013 10:21:53 GMT

It looks I found some solution:

make a custom category name it ultrasurf and put a Regex like this in there

%0x1403000000101%*

this seems to be the string that will catch it....

Maybe someone knows if it is already in the predifined category: "web page translation" ??

Thanks Ivo