What's New in Check Point SASE
Wednesday, 9 September @ 5pm CET / 11am EDT
The State of Ransomware Q2 2026:
This Quarter's Trends, and Their Impact on Your Defenses
AI Security Masters
Implementing the AI Security Trifecta
CheckMates Go:
Half is Not Enough
Does anyone use the anonymizer category to prevent incoming traffic from using anonymizers to their web sites?
The Anonymizer category is specifically for outbound connections.
I don't believe it will work for blocking traffic FROM anonymizers.
We do offer a list of TOR IPs you can block, though: https://support.checkpoint.com/results/sk/sk103154
I used it before for some proxy blocking in the lab. Below are best references I could find.
https://usercenter.checkpoint.com/ucapps/urlcat/categories
An intermediary which prevents Web sites from seeing a user's Internet Protocol (IP) address. Anonymizers are often used to circumvent company network acceptable use policies to potentially hide non-appropriate behavior, however in the home setting they may be used to provide additional layers of anonymity and protect privacy. Examples: http://www.anonymizer.com, http://www.megaproxy.com, http://www.hidemyass.com
https://appwiki.checkpoint.com/appwikisdb/public.htm
Just filter for category as anonymizer and same for the tags.
Andy
I used it before for some proxy blocking in the lab. Below are best references I could find.
https://usercenter.checkpoint.com/ucapps/urlcat/categories
An intermediary which prevents Web sites from seeing a user's Internet Protocol (IP) address. Anonymizers are often used to circumvent company network acceptable use policies to potentially hide non-appropriate behavior, however in the home setting they may be used to provide additional layers of anonymity and protect privacy. Examples: http://www.anonymizer.com, http://www.megaproxy.com, http://www.hidemyass.com
https://appwiki.checkpoint.com/appwikisdb/public.htm
Just filter for category as anonymizer and same for the tags.
Andy
I used it before for some proxy blocking in the lab. Below are best references I could find.
https://usercenter.checkpoint.com/ucapps/urlcat/categories
An intermediary which prevents Web sites from seeing a user's Internet Protocol (IP) address. Anonymizers are often used to circumvent company network acceptable use policies to potentially hide non-appropriate behavior, however in the home setting they may be used to provide additional layers of anonymity and protect privacy. Examples: http://www.anonymizer.com, http://www.megaproxy.com, http://www.hidemyass.com
https://appwiki.checkpoint.com/appwikisdb/public.htm
Just filter for category as anonymizer and same for the tags.
Andy
For TOR - I'm wondering even if you have AV/AB and can use custom intelligence feeds which the SK mentions to use as the method as best practice, is there any drawbacks for using as network feed instead? I would think if you do that way would be processed by FW blade and sooner in the packet flow so wonder if it is still best practice on 81.20?
For TOR - I'm wondering even if you have AV/AB and can use custom intelligence feeds which the SK mentions to use as the method as best practice, is there any drawbacks for using as network feed instead? I would think if you do that way would be processed by FW blade and sooner in the packet flow so wonder if it is still best practice on 81.20?
No specific drawbacks to using Network Feeds that I'm aware of.
No specific drawbacks to using Network Feeds that I'm aware of.
