block ultrasurf (https) through webpage translation category??

[meijerivo]

Hi,

Does anyone have experience with blocking Ultrasurf that users use to bypass the WSA proxy??

I was wondering if it is part of cursom categories.

If not, would it be possible to bypass this with decrypting https and use a regex?

An example or advise would be appreciated.

Ivo M

[meijerivo]

It looks I found some solution:

make a custom category name it ultrasurf and put a Regex like this in there

%0x1403000000101%*

this seems to be the string that will catch it....

Maybe someone knows if it is already in the predifined category: "web page translation" ??

Thanks Ivo