Blocking Ultra surf

Question

Hi All, 
 Tried to block ultra surf application and google chrome extension but is not working.. currently using mr3 firmware. 
 Is there any other ways to block it without using https scan and decrypt? 
 
 Thanks,

sachingurung · Answer

Hi Leo, 
 Welcome to XG community. We have an unwritten rule of one question per thread, that makes it easy for other users to search answers. 
 HTTPS scan and decrypt is necessary for deep inspection and TLS handshake. For critical applications like proxy, this is mandatory. You will also need to enable micro app scanning option in the Application control policy which deep inspects the packet communication. 
 If you are still not able to block the proxy application then TELNET/SSH to XG and go to option 4. Device console. 
 Execute, set ips maxpkts 100. 
 Renew the IP address on your system and check the working of proxy. If that doesn't work, you have to contact support for further troubleshooting. Also, reset the maxpkts to 8 by executing set ips maxpkts 8. 
 Thanks

Lalit goswami · Answer

Hi All, 
 Block these application in Application Filter-

and all the VPN Proxies. 
 and Need to block below web filter categories 
 IP Address 
 None 
 Anonymizers 
 Spam URLs 
 Spyware& Malware 
 Parked Domain 
 Peer to Peer & Torrents. 
 You can try this without Https scan. 
 
 Regards, 
 Lalit