Are any of your organization's trusted network assets behaving as TOR relays, bridges, or devices?

To find out, enable Asset Manager to ingest NetFlow (or Netflow from a similar flow-collection infrastructure and also enable a threat intelligence feed containing TOR intelligence data such as iDefense.

Note: The standard Asset Manager requirements are not inclusive of this integration. Additional storage may be required to index a TOR feed.

Configure the integration as follows:

1. In Asset Manager, go to Settings > Integrations > TOR, and then click Configure.
2. Turn on the Enabled toggle to activate the integration.
   
   
3. Enter a Polling Interval (by Hour) to indicate the time that should elapse between fetching the latest feed data. Input 24 to poll daily, input 12 to poll twice a day, and so on.
4. Click Test to confirm that the feed is configured correctly.
5. Click Save.