Forum Discussion

Petruk_Cemeng_7's avatar
Petruk_Cemeng_7
Icon for Nimbostratus rankNimbostratus
Oct 10, 2012

How to Blocking ULtrasurf?

Hi All,   Is there any irule or configuration on F5 for blocking ultrasurf? I try to use ip intelegence irule on LTM,it did not work because the destination ip address is not registered as bad r...
app sec
BIG-IP Access Policy Manager (APM)
security
nitass's avatar
nitass
Icon for Employee rankEmployee
Oct 11, 2012
the irule is only block the client ssl hello that have signature 804c010300003300000010 (in hex) , not all ssl, because on my testing the ultrasurf have that signature on the client ssl hello.have you seen the log (in CLIENT_DATA) in ltm log file?