Re: Ultrasurf Block on R81.20

VIKASH_GIRI · ‎2025-02-11

Hi Team,

I m trying to block ultrasurf but its not getting , when check logs its ultrasurf is block but i am to acceess.

emmap · ‎2025-02-12

I don't know that being able to open its page on the chrome web store is a valid test.

VIKASH_GIRI · ‎2025-02-12

yes, i am able to add chrome extension and able to use facebook which we blocked.

Lesley · ‎2025-02-12

Traffic is allowed towards the chrome store not the ultrasurf website. If you want to manage web browser extensions it should be done on GPO level (AD). Or block the chrome store, but then you block all extensions

If user installs extension does this extension work? If so, do you run HTTPS inspection? Or you have categorize https websites enabled?

https://community.checkpoint.com/t5/Management/Difference-between-HTTPS-Inspection-and-Categorize-HT...

-------
Please press "Accept as Solution" if my post solved it 🙂

hi,

Ultrasurf is vpn proxy which used to bypass the firewall to use block website, so when we add ultrasurf on ext it will allow you to access all blocked content.

Go through below link

Solved: Best Practices Against Ultrasurf - Check Point CheckMates

VIKASH_GIRI · ‎2025-02-16

we are doing setup for University where students will BYOD and we don't have control over them, so need to block what possibility we found .

the_rock · ‎2025-02-17

What was already suggested is probably your best bet.

Andy

Best,
Andy
"Have a great day and if its not, change it"

Lesley · ‎2025-02-17

So no https inspection. That will be a pain. Is categorize https websites enabled in Smart Console?

-------
Please press "Accept as Solution" if my post solved it 🙂

the_rock · ‎2025-02-15

Were you able to fix it?

Best,
Andy
"Have a great day and if its not, change it"

the_rock · ‎2025-02-12

What @Lesley said is 100% correct. I will test this in my lab tomorrow, since I have ssl inspection enabled, but I doubt it will be any different.

Andy

Best,
Andy
"Have a great day and if its not, change it"

PhoneBoy · ‎2025-02-13

Allowing users to install random browser extensions is considered poor practice.

Having said that, to fully block Ultrasurf, you need to make sure you have a strict outbound policy (only specific web ports allowed) and use HTTPS Inspection + App Control.
Ultrasurf is also known to be very evasive and we’ve had to adjust the signature for it in the past.

Are you a member of CheckMates?

Ultrasurf Block on R81.20