[Sidewinder] Ultrasurf block on Sidewinder

[Sidewinder moderated discussion list]

This is a "business" problem and not a technical problem, so the ideal 
solution is:

a) Turn on authentication in your www proxy environment.

b) Have HR fire the first person you catch using it.

(I'm not really kidding about this, BTW.)

If you want to fix this technically, there's a few ways.

1) Turn on proxy authentication.  In addition to giving you a great 
one-to-one mapping of users to the sites they visit, most pseudo-proxy 
software doesn't understand or won't work with proxy authentication, 
Ultrasurf included.

2) Turn on Trustedsource filtering on your outbound HTTP rules.  Nearly all 
of the proxy IPs used by Ultrasurf that I was able to capture are rated as 
"high" risks by Trustedsource and would have been blocked.

3) Tell Smartfilter to block uncategorized IP address requests.  I don't 
recall the specific location of the setting, but there is a setting in the 
SF console to tell SF how to behave in the presence of URL requests that 
contain IP addresses.  If you choose "block", you will easily block 
Ultrasurf that uses exclusively "CONNECT" requests to individual 
uncategorized IPs.  You will, however, get a little blowback in terms of 
other, more innocent sites that are blocked.  This means that if you choose 
this option, you will have to spend some time either submitting these good 
IPs for categorization or whitelisting them.

-J






--On Thursday, January 28, 2010 1:37 PM +0500 Sidewinder moderated 
discussion list <sidewinder at adeptech.com> wrote:

> Hi,
>
> I have blocked anonymizers, anonymous Utility , uncategorized utilities,
> malicious sites. But still the users running  utlrasurf can brows the
> restriced sites.
>
>
>
> -----Original Message-----
> From: sidewinder-bounces at adeptech.com
> [mailto:sidewinder-bounces at adeptech.com] On Behalf Of Sidewinder moderated
> discussion list
> Sent: Wednesday, January 27, 2010 10:31 PM
> To: sidewinder at adeptech.com
> Subject: Re: [Sidewinder] Ultrasurf block on Sidewinder
>
> On SmartFilter, block these categories: Malicious Sites, Anonymizers
>
> Then they shouldn't be able to use it.
>
> Cheers,
> Mike
>
> -----Original Message-----
> From: sidewinder-bounces at adeptech.com
> [mailto:sidewinder-bounces at adeptech.com] On Behalf Of Sidewinder
> moderated discussion list
> Sent: Wednesday, January 27, 2010 12:08 AM
> To: sidewinder at adeptech.com
> Subject: [Sidewinder] Ultrasurf block on Sidewinder
>
> Hi,
>
> We are using SideWinder as our gateway and smart filter as web filter,
> in
> our environment some users ate using ULTRASURF (a software which bypass
> all
> the proxies), is there any possible way to block it on sidewinder.
>
>
>
> _______________________________________________
> Sidewinder mailing list
> Sidewinder at adeptech.com
> http://mail.adeptech.com/mailman/listinfo/sidewinder
> _______________________________________________
> Sidewinder mailing list
> Sidewinder at adeptech.com
> http://mail.adeptech.com/mailman/listinfo/sidewinder
>
> _______________________________________________
> Sidewinder mailing list
> Sidewinder at adeptech.com
> http://mail.adeptech.com/mailman/listinfo/sidewinder
>