how to block ultrasurf 13.01 version

[Ramesh_M]

Hi, I have blocked all proxy applications in application control list. But still opening the latest versions of ultrasurf. It can block ultrasurf 10.2 versions. Tried to block using custom signatures as well but still not blocking. IOS versions is 4.0 mr3 patch 12. Please help me to sorted it out.

[Dave_Hall]

The entry for Ultrasurf_9.6+ on the FortGuard website indicates you also need to block " Freegate.Searching" as well.

[Ramesh_M]

Hi, I have blocked all the proxy applications. still I am not able to block..

[Dave_Hall]

Please review this KB article; it also mentions needing to apply the app sensor to DNS traffic (besides applying it to web traffic). It is suggested in one of the KB articles (re ultrasurf) to contact Fortinet support if you are still having problems blocking this app.

[Ramesh_M]

Dear Dave, In our network we are using Internal DNS server in the internal network.

[ede_pfau]

But your internal DNS must eventually connect to your ISP' s DNS on the net. Apply the AppControl profile to the policy which allows DNS requests to the outside.

[Sachin8094]

Hi, I am also facing the same issue, i have the same version and patch is running on the box. Please help us out for the same

[Teemo]

Is ssl deep scanning Enabled ?

[Lyndon]

Hi Ramesh M,

We have the same problem here we already block the ultrasurf application, but ultrasurf chrome extension we are not able to block it. until now we have no idea on how to block this things.

i hope there will be a fortiSuperMan that will help us. :D

regards,

lyndon

[hmtay_FTNT]

Hello,

If anyone finds the Ultrasurf_9.6+ signature not blocking for now, can you let me know? If you are using FortiOS 5.4 and above, our IPS engine now has the ability to block Ultrasurf without deep-inspection.

HoMing