How to block UltraSurf

what version of astaro is on the machine?

NetRange:       65.49.14.0 - 65.49.14.255
CIDR:           65.49.14.0/24

In Packfilter
DENY from 65.49.14.0/24 
to ANY
[/COLOR]OriginAS:       
NetName:        HURRICANE-CE1805-0934
NetHandle:      NET-65-49-14-0-1
Parent:         NET-65-49-0-0-1
NetType:        Reassigned
RegDate:        2009-11-25
Updated:        2009-11-25
Ref:            http://whois.arin.net/rest/net/NET-65-49-14-0-1

CustName:       Sophidea, Inc.
Address:        2710 Thomes Ave
Address:        Suite 884
City:           Cheyenne
StateProv:      WY
PostalCode:     82001
Country:        US
RegDate:        2009-11-25
Updated:        2011-03-19
Ref:            http://whois.arin.net/rest/customer/C02366101

OrgAbuseHandle: ABUSE1036-ARIN
OrgAbuseName:   Abuse Department
OrgAbusePhone:  +1-510-580-4100 
OrgAbuseEmail:  abuse@he.net
OrgAbuseRef:    http://whois.arin.net/rest/poc/ABUSE1036-ARIN

OrgTechHandle: ZH17-ARIN
OrgTechName:   Hurricane Electric
OrgTechPhone:  +1-510-580-4100 
OrgTechEmail:  hostmaster@he.net
OrgTechRef:    http://whois.arin.net/rest/poc/ZH17-ARIN

RAbuseHandle: ABUSE1036-ARIN
RAbuseName:   Abuse Department
RAbusePhone:  +1-510-580-4100 
RAbuseEmail:  abuse@he.net
RAbuseRef:    http://whois.arin.net/rest/poc/ABUSE1036-ARIN

RNOCHandle: ZH17-ARIN
RNOCName:   Hurricane Electric
RNOCPhone:  +1-510-580-4100 
RNOCEmail:  hostmaster@he.net
RNOCRef:    http://whois.arin.net/rest/poc/ZH17-ARIN

RTechHandle: ZH17-ARIN
RTechName:   Hurricane Electric
RTechPhone:  +1-510-580-4100 
RTechEmail:  hostmaster@he.net
RTechRef:    http://whois.arin.net/rest/poc/ZH17-ARIN

DNS records

that works until the allocation changes...app control is the better way.

MY ASG:

Model: ASG220
Firmware version: 8.300

These can't block Ultrasurf

Sonic Wall block simple.

How to Block Ultrasurf using a SonicWALL Firewall - YouTube

Please help me!

Thanks!

What William said -- Astaro needs to add detection capability for that application to the Application Control / Awareness engine...