UltraSurf

[Gatt]

Just had an outbreak of kids getting on pr0n, facebook, etc

After some investigation this little app was found to be the culprit

 

UltraSurf

 

I have since added it to Applocker / SRP policies...

 

It runs from a USB stick and stays running even after it has been removed...

[sonic1485]

we use this to bypass our filters hehe

[FN-GM]

we block .exe so wouldn't have a problem.

[nile_c]

Hi Folks, you can also look to your web filter to protect against UltraSurf.

 

Best practice on a SmoothWall is to visit 'guardian » filtering » per group settings' and set "Block invalid SSL certificates" and "Intercept HTTPS" for the relevant groups.

Naturally, you should make sure the Web Proxies category is blocked in your filtering policy and that clients do not have direct net access.