should block tor traffics on fortigate as best practice for enterprise ?

[WQ]

hi, can someone pls advise whether we should block tor traffics (tor onion) on internet router as best practice for an enterprise? thanks in advance! 

[funkylicious · Accepted solution]

you mean Tor traffic?

it depends on your company policy, but i think most companies block it.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-block-Tor-connections/ta-p/316401 

[kaman · Accepted solution]

Hi WQ,

You can also follow the document below on how to block TOR traffic from the WAN to the LAN, by using the ISDB object. This ISDB object contains a list of all TOR exit nodes currently known and is updated by FortiGuard.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-block-traffic-coming-from-TOR-exit-...

Regards!

[funkylicious · Accepted solution]

you mean Tor traffic?

it depends on your company policy, but i think most companies block it.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-block-Tor-connections/ta-p/316401 

[kaman · Accepted solution]

Hi WQ,

You can also follow the document below on how to block TOR traffic from the WAN to the LAN, by using the ISDB object. This ISDB object contains a list of all TOR exit nodes currently known and is updated by FortiGuard.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-block-traffic-coming-from-TOR-exit-...

Regards!

[VinayHM · Accepted solution]

Blocking Tor traffic (including Tor onion services) on your enterprise internet router is generally considered a best practice from a security perspective.
Tor can be exploited by malicious actors to anonymize malicious activities, exfiltrate data, or access illicit content, which can pose significant security and compliance risks.

[WQ]

thanks @VinayHM @kaman @funkylicious  for your advices!