block tor

[atelcom]

Hi,

please tell me, how can i block tor in pa device,

i create a rule with tor and tor2web , i set action to block but it is still runnning , it block skype too

IS that normal

thank's in advance

Regards,

[pa_admin]

Hi,

we set up a rule using custom application "Encrypted_tunnel" and application filter "Peer-to-peer", this works perfectly fine with us. No Tor-traffic is allowed.

Regards

[atelcom]

thank, but can we block it without doing an ssl decryption

[pa_admin]

Tor should be recognized without decrypt (you cannot decrypt Tor, that's the 'strenght' of Tor)

We set up encrypt_tunnel 'cause we want to block all decrypted tunnels as well.

[atelcom]

i set up a rule just like your's, and it still working

and when i set a decryption rule, it was blocked

any exaplanation for this 😕

[pa_admin]

Strange.
When checking our log, traffic is blocked, but not decrypted.

[Dz3015]

We have our's set up to block the specific apps and it is dropping.  we have it set up any zone any source.  Do you have it set up in both directions?

We also aren't using any decryption policies.