ULTRASURF

This signature detects access to the UltraSurf/UltraReach download site, which is a privacy application used to hide a users Internet activity. Traffic from this application is indistinguishable from generic SSL. Downloaders of this application may be attempting to disguise their internet traffic.

Short Name
ULTRASURF
Category
Web
SubCategory
Anonymizer
Risk
5
Release Date
--
Supported Platforms

Available to all SRX running 12.3X48+

Available to all MX running 20.2R1+

Available to all vSRX running 20.3R1+

Port
UDP/1900,TCP/20,TCP/543,TCP/443,TCP/25,445,UDP/443,8000,TCP/1433,TCP/1080,TCP/465,TCP/21,TCP/80,UDP/80,1434,UDP/4500,TCP/587,TCP/554,TCP/53,UDP/88,TCP/102,TCP/22,8080,UDP/5246-5247,3128,UDP/500,UDP/137,TCP/5445,UDP/554,TCP/139,UDP/135,TCP/993,UDP/53,TCP/135,TCP/995
Application Group
junos-approot:applications:vpn-tun

Found a potential security threat?