Forum Discussion

Petruk_Cemeng_7's avatar
Petruk_Cemeng_7
Icon for Nimbostratus rankNimbostratus
Oct 10, 2012

How to Blocking ULtrasurf?

Hi All,   Is there any irule or configuration on F5 for blocking ultrasurf? I try to use ip intelegence irule on LTM,it did not work because the destination ip address is not registered as bad r...
app sec
BIG-IP Access Policy Manager (APM)
security
Petruk_Cemeng_7's avatar
Petruk_Cemeng_7
Icon for Nimbostratus rankNimbostratus
Oct 12, 2012

Thanks Nitass and Hoolio, the error log is not appeared again. But we still cannot block ultrasurf , eventhough the client ssl hello is droped or rejected.

 

Ultrasurf is still able to send the ssl encrypted traffic, . I test this with version ultrasurf 10.0.1

 

we checked on the pcap file there is no ssl server hello send from ultrasurf server to client, Is it possible to create ssl encrypted traffic without client ssl hello or server ssl hello?