UltraSurf

[rcdd2]

Hello,

Does anyone blocked UltraSurf or FreeGate usage?

I saw in my internet research that someone blocked theses avoidances using sonicwall application firewall, because Ultrasurf uses “140300000101? for SSL ehlo messages. If I can block this signature with the your firewall you can block ultrasurf.

Anyone knows if is possible to do this rule using Cisco ASA?

Thanks,

Ricardo

 

[unclerico]

There's a few ways, but all of them involve money:
1) Purchase a Content Security and Control Services Module (CSC-SSM)
2) Purchase a filtering software such as Websense
3) Layer your security access by placing a Cisco router in front of your ASA and enable NBAR protocol discovery.

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)