I see that trustedsource.org currently categorizes their main web site as "Anonymizers" with a risk score of 22. I'm expect they've rated all of their proxies similarly, which we block by category so that we don't need to maintain a black list for this.
Thank you for the reply, John. The issue isn't that users have access to the UltraSurf website, it's that the UltraSurf application (which requires no actual installation) completely bypasses the MWG proxy by creating and connecting to a proxy of its own, thus allowing for unrestricted access to the Internet. I can block the website without issue but I cannot block their proxy connections.
Ultrasurf can be blocked by web gateway without SSL scanning, but the web gateway cannot do it alone. Ultrasurf cannot be blocked by web gateway if the client is allowed to access the Internet directly on any port. It’s as simple as that. You cannot reasonably expect a web gateway to block or filter traffic that it doesn’t “see". Web Gateway needs to be used in combination with Network or host based firewall rules or MCP. Like a host based firewall, MCP has the ability to block access to non-standard ports by process.
Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as a Solution and/or Kudo my reply so we can help other community participants?
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.
Community Help Hub
New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.