ASD ISM 1628 Prevent anonymity network traffic in outbound connections

The IT team should set up your internet firewall to block access to known anonymity networks like Tor.

This can be done by updating the firewall settings with a list of these networks' server addresses, which are often provided by cyber security agencies like the Australian Cyber Security Centre.

System administrators should ensure that access to anonymity networks is routinely monitored.

Use existing network monitoring tools to flag unusual traffic that might indicate attempted connections and set up alerts to notify the team if such activity is detected.

Managers should educate staff on the potential legal and security risks of using anonymous browsing.

Hold regular information sessions or training workshops to explain why connecting to these networks is harmful and how it can affect the entire organisation.

System owners should periodically review and update the network's filtering rules.

Work with IT specialists to check that the list of blocked anonymity networks is current and includes any new ones that have been identified.

Contract with a cyber security provider to conduct regular audits of your network's security settings.

They should verify that connections to anonymity networks are blocked and help identify any configuration weaknesses that could be exploited.