How do I allow Sophos UTM connect to Tor browser

Just create a firewall rule allowing port 9001

I tried it. It doesn't  work.

Hi Dave and welcome to the UTM Community!

If you have your browser configured to use the UTM as an explicit proxy, Web Filtering will function in Standard mode, not Transparent.  In that case, you could try adding port 9001 to 'Allowed target services' on the 'Misc' tab.  However, ...

   statuscode="502"

If skipping antivirus scanning doesn't work, you will need to configure to skip the Proxy.

Cheers - Bob

I created a TCP 9001 port. I allowed this port in firewall section then I put TCP port 9001 to 'Allowed target services' on the 'Misc' tab.

I disabled completely antivirus and It doesn't  work.

I would like Tranparent mode. It is better than Standard mode.

May I change with above setting with Standard mode to allow Tor browser?

Easy troubleshooting steps

1. Create a FW rule with specific device allowing outgoing port 9001 and put the FW rule on top

2. Open Live Log and filter to that specific device and open your Tor Browser and check the traffic

I did it as you said. Result are the same error problems as above.

that's a web filter log not firewall log

that's a web filter log not firewall log

Patrick I did everything as you said. I checked firewalls logs, (port tcp 9001 and others ports) there is nothing to block there.I would like to say that if allow all ports from firewall section tor browser cannot connect.

The only way to allow tor are:

1.If disable web filtering Tor browser or

2. tick Do not proxy HTTPS traffic in transparent mode then

tor browser connect  normally.

Thank you

You might want to post images of your configuration on this post, so maybe others might have some suggestions.

Good Luck

Please take look!

Attached is my FW log showing access via port 9001, once I open my Tor Browser..  Make sure your FW rule log is enabled.  I don't put port 9001 in the misc either.

Why do I have to put port 9001 on top ? On installation wizard on top has dns , terminal, application, email, web filter and etc.

Please explain why do I have to put 9001 on top?

FW rules are applied from top to bottom, and the first rule that matches the traffic the rest are ignore.  In your situation and for troubleshooting purpose you want to put the rule 1st to see if the rule is applied.  If you're not seeing anything, then more likely the FW rule log is not enable.