I'm working for a high school. We have given every student their own laptop. Some of our students have figured out how to bypass our web filter using a program called Ultrasurf.
If you're not familiar with it, Ultrasurf is sort of like a proxy service. It basically goes online and downloads a large list of proxy servers from a google docs file and then randomly connects to one. We obviously can't block Google docs. It tends to use port 443 so we obviously can't block that without using HTTPS and the list of host it downloads is too long to filter all of them.
Is there any way of blocking it?
If not, I had another idea. Since these are our laptops, we have some degree of control over the software. We use McAfee's enterprise AV software. I'm not an expert when it comes to McAfee. Is it possible to create a custom signature for McAfee? If so, can we create a signature so that McAfee will think this program is malicious and simply delete it every time it is downloaded? We don't see much Tor activity but I assume such a trick would also let us gut Tor if our students learn about it.