Bug ID 765985: Ultrasurf traffic not classified in PEM stats

Last Modified: May 01, 2019

Bug Tracker

Affected Product:  See more info
BIG-IP PEM(all modules)

Known Affected Versions:
13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4, 13.1.1.5

Opened: Mar 27, 2019
Severity: 4-Minor

Symptoms

The PEM DPI classifier does not classify traffic received from the Ultrasurf client application.

Impact

Ultrasurf traffic does not get classified in gpa classification stats. No visibility of Ultrasurf traffic.

Conditions

A PEM end user is using the Ultrasurf client application to tunnel/VPN traffic to remote, dynamically changing Ultrasurf proxies.

Workaround

Dynamically changing Ultrasurf IP proxies can be dynamically identified by packet-capturing Ultrasurf traffic with other methods, identifying which Ultrasurf proxy IP addresses the Ultrasurf client is trying to connect to, and then blocking the dynamically changing discovered Ultrasurf proxy IP addresses.

Fix Information

None

Behavior Change