how to block Tor browser this like browsers and vpn tools?

[Bahruz]

Hi !

I have question for you. I use PA-3020 Firewall. how to block Tor browser, opera vpn browser and this like browsers.

I also want to block proxy VPN tools.

Example: express vpn, nord vpn etc.

[reaper]

Hi @Bahruz

The easiest way to accomplish this if you want to cover a 'type' of application, is to build an application filter for subcategory proxy and encrypted-tunnel

This will cause the 'group' to be autonatically populated with all the applications that have the behavior you selected.

You can then create a security policy to block these applications

here's some more information on how to leverage application filters : What are the recommended applications for internet access?

[Bahruz · Accepted solution]

 for test i do write this rules but tor is still work

[reaper]

did you allow ssl in a different policy and enable ssl decryption ?

this is needed to look inside encrypted ssl sessions and identify some applications

[BPry]

@Bahruz,

If you are not decrypting the traffic then it's likely that the PA just can't identify the traffic. Make sure that you verify what rule the traffic is actually hitting in the security policy rulebase though; it could be that there is a rule above this one that allows the traffic or that the rule that allows the traffic isn't being limited upon application at all. 

[Bahruz]

no i didnt. how i will do

[reaper]

Hi @Bahruz

This article is a good guideline (it has a tutorial video also) to get your SSL decryption set up: How to Configure SSL Decryption