What are the ways to block the use of tor browser in a corporate network?

Question

linux

Good afternoon, tell me if there are ways to block this application? Googling doesn't give specific instructions.

Answer 1

Do you generally ban TOR or just TOR-Browser? If the network itself is blacklisted with 10 IP root servers and the task for ordinary users will become much more complicated.

Answer 2

Obviously, to prevent users from installing and running this application, disable removable media and run executable files from system folders. And disable writing to system folders along with that.

Answer 3

white list of hosts in the firewall. the rest are all through a corporate proxy where the rules are given. It is also necessary to ban the use of mobile Internet, install cellular jammers and access to the Internet and calls only via Wi-Fi + own IP telephony.
Although you can simply monitor the activity of hosts and deprive entire departments of bonuses, people themselves will quickly find those who use the Tor browser.

Answer 4

Most DPIs allow you to successfully detect and block TOR traffic, but for many, installing DPI is expensive and there are no specialists, so only politicians can fight well or white / black list.