Thread Info
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

BLOCKING of ULTRASURF addons/extensions in Google Chrome browser?

Proudmore

Hi Sophos Community

Good Day,

Is there any way to block  ultrasurf addons/extensions in google chrome browser?

Or is there anyway that the users may have not access to add utilities on Google chrome - browser?

Scenario.

Web protection > transparent mode > decrypt and scan > anonimyzers and utilities

Filter action

* Block anonymizers and utilities
* Block jobsearch

But after turning on of ultrasurf addons in my browser.. you can now browse anything you want

Thank you

PS.
I already been blocked these urls after searching in sophos community but sadly no luck, ultrasurf still running

https://[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}/
http://[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}/
https?://[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}/

 

 

 

 



This thread was automatically locked due to age.
  • 0

    I'm seeing this issue too with UTM 9.  How can the Ultrasurf Chrome addin be blocked?

    • 0 in reply to Jeffrey Botts

      Also seeing the same thing. I've even got it blocked in the application control settings.

      • 0 in reply to rsenio

        Hi Sir Rsenio,

        Good Day

        Can you share to us your configuration? This is our problem for a couple of months.

        How do we block ultrasurf addons/extension in google chrome browser?

        Gracias

        • 0 in reply to Proudmore

          Web Protection / Application Control / New Rule / Control these Applications / Category / Proxy

          and check Ultrasurf

          Good Luck

          • 0 in reply to PatrickLee

            Hi Sir Patrick,

            Good Day

            I already apply your configurations BUT Ultrasurf in this problem is not an application it is a ADDONS/EXTENSION on gchrome browser.... We already know that UTM can block Ultrasurf Application. Sadly under Application > Proxy configurations as you said.. Ultrasurf is still active.. users may still access blocked url..

            But how to block ultrasurf on ADDONS and EXTENSION like this one?

            Gracias

            • 0 in reply to Proudmore

              Mine is also seeing the same issue, I can't see why you'd want my configuration

              • 0 in reply to PatrickLee

                I have this setup this way already and it is not working for the Chrome plugin.  Also it is not working on the new Ultrasurf Beta 1.0.7 on Android.

                • 0 in reply to Jeffrey Botts

                  Support tells me that they can block ultra surf no problem, but he's running 9.503-4 and I am still on 9.413-4

                   

                  What firmware are you guys running?

                  • 0 in reply to rsenio

                    I'm on the latest firmware and still have the problem.  It probably only effect upgraded UTMs.  I'm guessing that Sophos Support has a fresh installed version of the UTM.

                    • 0 in reply to Jeffrey Botts

                      I put in a ticket for this issue with Sophos and received a totally different response from others in this thread.  This is what they said:

                       "This is a known bug with Sophos, ultrasurf is not getting blocked by application control." 

                       So we are in the waiting loop to get this fixed.  I've asked for an ETA on the patch for the fix.  I'll let everyone know what Sophos says.

                      • 0 in reply to Jeffrey Botts

                        Lol, here was my response

                         

                        I tried reaching you via phone to further discussed the issue you are experiencing but got voice mail.

                        I was tested with version 9.503-4 and was able to block UltraSurf.

                        Let me know your availability so we can do some tests.

                        Thanks

                        • 0 in reply to rsenio

                          LOL is right.  They must have not known that this was an issue until we all put in tickets.

                          I heard back from support and they said: "Unfortunately, there is no ETA that when this bug will get fix."  So who knows when it will get fixed. 

                          Looks like I'm going to have to put in an Untagle box in transparent bridge mode between my LAN and Sophos UTM to block this.  I can turn off IPS on my Sophos UTM and hand this off to the Untangle box too.  Then I won't have 50% - 60% CPU use on the Sophos UTM.