topic Re: block tor in General Topics

block tor

atelcom — Thu, 12 Feb 2015 09:38:43 GMT

Hi,

please tell me, how can i block tor in pa device,

i create a rule with tor and tor2web , i set action to block but it is still runnning , it block skype too

IS that normal

thank's in advance

Regards,

Re: block tor

pa_admin — Thu, 12 Feb 2015 10:16:40 GMT

Hi,

we set up a rule using custom application "Encrypted_tunnel" and application filter "Peer-to-peer", this works perfectly fine with us. No Tor-traffic is allowed.

Regards

Re: block tor

atelcom — Thu, 12 Feb 2015 10:28:09 GMT

thank, but can we block it without doing an ssl decryption

Re: block tor

pa_admin — Thu, 12 Feb 2015 10:31:36 GMT

Tor should be recognized without decrypt (you cannot decrypt Tor, that's the 'strenght' of Tor)

We set up encrypt_tunnel 'cause we want to block all decrypted tunnels as well.

Re: block tor

atelcom — Thu, 12 Feb 2015 10:37:23 GMT

i set up a rule just like your's, and it still working

and when i set a decryption rule, it was blocked

any exaplanation for this 😕

Re: block tor

pa_admin — Thu, 12 Feb 2015 10:55:45 GMT

Strange.
When checking our log, traffic is blocked, but not decrypted.

Re: block tor

Dz3015 — Thu, 12 Feb 2015 15:47:38 GMT

We have our's set up to block the specific apps and it is dropping. we have it set up any zone any source. Do you have it set up in both directions?

We also aren't using any decryption policies.