Ultrasurf is all https so you won't be able to use acls on the ASA to block it while permitting legitimate traffic. Cisco Ironport Web Security Appliances can do HTTPS proxy and it may be able to block these HTTPS connections.
In ASA this is such feature as Regular Expressions with MPF (regexp)
may be it help you.
Getting Started
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:
