In this article

Use this article to understand how to block TOR traffic with DNSFilter.

The TOR network (The Onion Router) is a series of servers that allows for anonymous communication over the internet. Its function is independent of the DNS system, so DNS-based filtering solutions like DNSFilter are not able to prevent TOR traffic.

What DNSFilter can do

Though TOR traffic can't be halted by DNSFilter, TOD sites on the clear web can be blocked under the Proxy & Filter Avoidance content category.

This means DNSFilter can prevent users from accessing these sites or their download pages, which could otherwise lead them to obtain the TOR browser. It's a preemptive measure, aimed at reducing the chance of TOR usage within your network.

Note that if a user has already installed the TOR browser on their device, they can still access the TOR network when connected to your network. This is a potential loophole, but there are ways to address it.

Other measures to block TOR traffic

Certain firewalls have the capability to block TOR traffic. We recommend consulting your firewall manufacturer's documentation or seeking expert advice to explore this option.

Implementing such a measure could further strengthen your organization's cybersecurity posture and ensure a safer, more controlled internet experience.