Last Modified: Jul 12, 2023
Affected Product(s):
BIG-IP PEM
Known Affected Versions:
13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4, 13.1.1.5, 13.1.3, 13.1.3.1, 13.1.3.2, 13.1.3.3, 13.1.3.4, 13.1.3.5, 13.1.3.6, 13.1.4, 13.1.4.1, 13.1.5, 13.1.5.1
Opened: Mar 27, 2019 Severity: 4-Minor
The PEM DPI classifier does not classify traffic received from the Ultrasurf client application.
Ultrasurf traffic does not get classified in gpa classification stats. No visibility of Ultrasurf traffic.
A PEM end user is using the Ultrasurf client application to tunnel/VPN traffic to remote, dynamically changing Ultrasurf proxies.
Dynamically changing Ultrasurf IP proxies can be dynamically identified by packet-capturing Ultrasurf traffic with other methods, identifying which Ultrasurf proxy IP addresses the Ultrasurf client is trying to connect to, and then blocking the dynamically changing discovered Ultrasurf proxy IP addresses.
None