Symptom
Traffic gets misscategorized as Ultrasurf in deployments with Proxies behind the Firepower platforms.
Conditions
This was caused by the false identification of the Proxy server, in which has affected the overall identification of the Ultrasurf application running under a network.
Workaround
The Ultrasurf detector can be disabled
Further Problem Description
This problem appears when there is a decryption traffic and an additional proxy server between the client and the firepower devices
