Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 2 replies
  • Answers 2 answers
  • Subscribers 28 subscribers
  • Views 7433 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Blocking Ultra surf

GonFreecs

Hi All,

Tried to block ultra surf application and google chrome extension but is not working.. currently using mr3 firmware.

Is there any other ways to block it without using https scan and decrypt? 

Thanks,



This thread was automatically locked due to age.
Parents
  • 0

    Hi Leo,

    Welcome to XG community. We have an unwritten rule of one question per thread, that makes it easy for other users to search answers.

    HTTPS scan and decrypt is necessary for deep inspection and TLS handshake. For critical applications like proxy, this is mandatory. You will also need to enable micro app scanning option in the Application control policy which deep inspects the packet communication.

    If you are still not able to block the proxy application then TELNET/SSH to XG and go to option 4. Device console.

    Execute, set ips maxpkts 100.

    Renew the IP address on your system and check the working of proxy. If that doesn't work, you have to contact support for further troubleshooting. Also, reset the maxpkts to 8 by executing set ips maxpkts 8.

    Thanks

Reply
  • 0

    Hi Leo,

    Welcome to XG community. We have an unwritten rule of one question per thread, that makes it easy for other users to search answers.

    HTTPS scan and decrypt is necessary for deep inspection and TLS handshake. For critical applications like proxy, this is mandatory. You will also need to enable micro app scanning option in the Application control policy which deep inspects the packet communication.

    If you are still not able to block the proxy application then TELNET/SSH to XG and go to option 4. Device console.

    Execute, set ips maxpkts 100.

    Renew the IP address on your system and check the working of proxy. If that doesn't work, you have to contact support for further troubleshooting. Also, reset the maxpkts to 8 by executing set ips maxpkts 8.

    Thanks

Children
No Data