Ultrasurf Proxy; False Log
The ultrasurf proxy restriction in XG firewall gives false response. The log viewer indicates that the application is being denied while the user is bypassing all the policies with a simple extension in chrome browser. It would be better if it rather said allowed than give false information.
Products such as Ultrasurf try a number of different connection methods to circumvent firewall-level blocking. We log the methods we see and block, but if Ultrasurf goes on to attempt a method that we do not yet detect, it may get through. Because we didn’t recognize it as Ultrasurf, we cannot log it as a successful Ultrasurf connection.