Last Modified: May 01, 2019
See more info
Known Affected Versions:
13.1.0, 188.8.131.52, 184.108.40.206, 220.127.116.11, 18.104.22.168, 22.214.171.124, 126.96.36.199, 188.8.131.52, 184.108.40.206, 13.1.1, 220.127.116.11, 18.104.22.168, 22.214.171.124, 126.96.36.199, 188.8.131.52
Opened: Mar 27, 2019
The PEM DPI classifier does not classify traffic received from the Ultrasurf client application.
Ultrasurf traffic does not get classified in gpa classification stats. No visibility of Ultrasurf traffic.
A PEM end user is using the Ultrasurf client application to tunnel/VPN traffic to remote, dynamically changing Ultrasurf proxies.
Dynamically changing Ultrasurf IP proxies can be dynamically identified by packet-capturing Ultrasurf traffic with other methods, identifying which Ultrasurf proxy IP addresses the Ultrasurf client is trying to connect to, and then blocking the dynamically changing discovered Ultrasurf proxy IP addresses.