Unable to block ultrasurf extension/addon in google chrome?
You will need to enable application policies that deny ultrasurf, along HTTPS scanning and CAs on your devices.
Further you will need to tighten up your firewall rules to only allow specific ports/applications etc.
Ian
thank you for your response, will try these