Currently programs like UltraSurf can be blocked through the combined usage of the HTTP proxy security features and packet filter rules as long as you know ports and domains used.
The next version of Astaro 8.200, which is currently in early beta, will be application aware. This will make the process much easier.
