Hi Habibi,
Ultra Surf uses random ports to connect to the Internet where WSA only looking at port 80 and 443.
Make sure you block the unused ports in the firewall and block the category Filter Avoidance in the decryption and access policies.
Hope this helps.
Regards,
Donny
(*If you have received the answer to your original question, and found this helpful/correct - please mark the question as answered, and be sure to leave a rating to reflect!)