topic Re: How to block Ultrasurf chrome plugin in General Topics

How to block Ultrasurf chrome plugin

Radmin_85 — Thu, 15 Feb 2018 06:36:27 GMT

Hello all

is there any way in palo alto netwroks firewall to block the ultrasurf which is plugin inside the chrome browser?

Re: How to block Ultrasurf chrome plugin

kiwi — Thu, 15 Feb 2018 11:10:13 GMT

It's been a while so I might be some versions behind but if I'm not mistaken SSL decryption is needed to block ultrasurf.

Then you can block the Ultrasurf app by policy.

Best practice to also block unknown-tcp.

Cheers !

-Kiwi.

Re: How to block Ultrasurf chrome plugin

Radmin_85 — Thu, 15 Feb 2018 18:15:26 GMT

we have activated ssl decryption.And we see the ultrasurf extension as google-base in the logs

Re: How to block Ultrasurf chrome plugin

Radmin_85 — Fri, 23 Feb 2018 06:15:48 GMT

any ideas?

Re: How to block Ultrasurf chrome plugin

OtakarKlier — Fri, 23 Feb 2018 17:38:28 GMT

Hello,

So its not seeing the application correctly? Perhaps that is a question for TAC support? Have you added a rule that blocks the ultrasurf application prior to all your other policies to see if it will block it? Or maybe you can use the URL filtering to block Category: proxy-avoidance-and-anonymizers?

Just a few thoughts.