cancel
Showing results for 
Search instead for 
Did you mean: 

PSIPHON and ULTRASURF

Getting noticed

PSIPHON and ULTRASURF

Hi Guys,

I just want to know if meraki MX can block psiphon and ultrasurf since this proxy method is very popular in the philippines mindanao side. These proxy method are the problem of most midsize company in mindanao because most of popular firewall cannot block their traffic.

 

Thanks in advance. 

10 REPLIES 10
Kind of a big deal

Re: PSIPHON and ULTRASURF

I don't know the answer.

 

Meraki uses the Brightcloud URL classification system for web sites.  If you look them up here and they come with a category then you can block that category.

 

http://beta.brightcloud.com/tools/url-ip-lookup.php

Getting noticed

Re: PSIPHON and ULTRASURF

Those are applications not a website or URL. Brightcloud is only a database for all url or websites that support for any firewall brands including meraki and cisco ASA or FTD.

If this application will be spread thoughout the world i  think that's the time the meraki would do their side. As of now, i know only one firewall brand that can block these applications.

 

Kind of a big deal

Re: PSIPHON and ULTRASURF

Thinking about this laterally.

 

Since this is a company, you have control over Company Assets.  Use the Meraki Systems manager on all network assets, Windows, Android, iPhone and Mac.

Configure the network to only allow devices to attach that have Systems Manager installed.

 

Add the applications to the black list, and create a security policy to flag the devices with these applications and deny them access (or any other alternative action) instead.

https://documentation.meraki.com/SM/Other_Topics/Configuring_Sentry_Policies

Getting noticed

Re: PSIPHON and ULTRASURF

I already advise that to the company but that is additional cost compare to other firewall brand that block that application.

 

Getting noticed

Re: PSIPHON and ULTRASURF

Anyway, thank you for the support philip.

Here to help

Re: PSIPHON and ULTRASURF

I'm having problem with ultrasurf too, nobody knows if meraki can block it?

Here to help

Re: PSIPHON and ULTRASURF

In this case we don't have governance on the network just on the merakis.

And there is no AD ))=

Getting noticed

Re: PSIPHON and ULTRASURF

@Maicon_Vieira right now this issue are not addressed by meraki team. I already raise this case but they want tme to put it on wish tap.

Maybe you could put it too in the "Make a wish" at the bottom of the dashboard.

Or else you may use Firepower Threat Defense Firewall of cisco. 

Here to help

Re: PSIPHON and ULTRASURF

Ok, if you have any news let us know please.

Thanks

New here

Re: PSIPHON and ULTRASURF

meraki has layer 7 rules to block some mobile applications but not all. We often get requests to block snapchat (Security Applicance/ Firewall) . Currently my MX600 (13.33) is unable to block ultrasurf and other proxy/anonymizers. We've requested this feature to the sales engineer. There are other products that do an effective job at stopping ultrasurf. Meraki is easy to use but lacks enterprise features
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.