It there a way to block Tor Browser

[deneill]

We have users that are bypassing our webfilter using the Tor Browser. Is there anyway to block this using an ASA5540                 

[jumora]

I was reading about this and on websense site they talk of multiple ways to block Tor but they also mention that Tor sites registered are around 1300 so at the firewall I don't believe that regex level will help. I am going to check with CSC module that does URL filtering over HTTP/HTTPS sites.

[jumora]

I believe that CSC can block based on a comment that we have a fix for CSC function that did not drop it in the past.

[jumora]

5540 by itself cannot block Tor based on the fact that it works over HTTPS and ASA has no inspection for HTTPS, if you have a CSC module on the ASA that could drop it but it seems that you should be reaching out to websense since they should be able to block HTTPs as the firewall can do HTTPS redirects to Websense filter. 

[jumora]

Do you need anything else?

Please rate our assistance.

[jumora]

Do you need anything else?

[jumora]

Please rate the assistance

[jumora]

????????????????????????

[Julio Carvajal]

Hello Deneil,

Due to the nature of the application I would not think so!

Use a dedicated application filtering device for it like the CX option on the Firewall (Application aware).

Rate all of the helpful posts!!!

Regards,

Jcarvaja

Follow me on http://laguiadelnetworking.com

[jumora]

Please rate the assistance so we can continue with other tickets

[nawir]

My way to block tor is this

http://nbctcp.wordpress.com/2014/10/20/blocking-tor-browser-in-cisco-asa-5505/