topic Re: how to block Tor browser this like browsers and vpn tools? in General Topics

how to block Tor browser this like browsers and vpn tools?

Bahruz — Tue, 30 May 2017 08:08:20 GMT

Hi !

I have question for you. I use PA-3020 Firewall. how to block Tor browser, opera vpn browser and this like browsers.

I also want to block proxy VPN tools.

Example: express vpn, nord vpn etc.

Re: how to block Tor browser this like browsers and vpn tools?

reaper — Tue, 30 May 2017 09:40:24 GMT

Hi @Bahruz

The easiest way to accomplish this if you want to cover a 'type' of application, is to build an application filter for subcategory proxy and encrypted-tunnel

This will cause the 'group' to be autonatically populated with all the applications that have the behavior you selected.

You can then create a security policy to block these applications

here's some more information on how to leverage application filters : What are the recommended applications for internet access?

Re: how to block Tor browser this like browsers and vpn tools?

Bahruz — Tue, 30 May 2017 11:19:24 GMT

for test i do write this rules but tor is still work

Re: how to block Tor browser this like browsers and vpn tools?

reaper — Tue, 30 May 2017 12:59:39 GMT

did you allow ssl in a different policy and enable ssl decryption ?

this is needed to look inside encrypted ssl sessions and identify some applications

Re: how to block Tor browser this like browsers and vpn tools?

BPry — Tue, 30 May 2017 20:15:39 GMT

@Bahruz,

If you are not decrypting the traffic then it's likely that the PA just can't identify the traffic. Make sure that you verify what rule the traffic is actually hitting in the security policy rulebase though; it could be that there is a rule above this one that allows the traffic or that the rule that allows the traffic isn't being limited upon application at all.

Re: how to block Tor browser this like browsers and vpn tools?

Bahruz — Wed, 31 May 2017 06:54:01 GMT

no i didnt. how i will do

Re: how to block Tor browser this like browsers and vpn tools?

reaper — Wed, 31 May 2017 08:27:39 GMT

Hi @Bahruz

This article is a good guideline (it has a tutorial video also) to get your SSL decryption set up: How to Configure SSL Decryption