Unable to block UltraSurf in explicit proxy mode

Article Number: 000002238
Products: Web Security and Filter, Web Security Gateway, Web Security Gateway Anywhere
Versions: 1.2, 7.0, 7.1, 7.5, 7.6, 7.7

Problem Description

I am running Websense Content Gateway (WCG) and cannot block UltraSurf in explicit proxy mode. I can successfully block UltraSurf in transparent proxy mode.


Note: WCG is needed to block UltraSurf as it can decrypt and inspect the encrypted traffic from UltraSurf. Network Agent cannot block UltraSurf as it does not decrypt the traffic.

UltraSurf will be blocked if using transparent proxy mode, but not if proxy settings have explicitly been set in the browser or using a PAC file. This is because UltraSurf does not use the internet browser's proxy settings.


Notes & Warnings

Additional Problems and Search Terms:
Ultrasurf bypass websense Hotspot shield