Is it even feasible to attempt to block ash? They can block the port, but users can set up sah on any port.

What level of monitoring would be necessary to detect a user's traffic was encrypted?