Request to block all traffic from Tor exit nodes
TKT-0012
Normal
Open
Policy Change
- Created By
- j.smith
- Created
- 2026-09-21 13:52
- Last Updated
- 2026-09-22 10:22
- Assigned Analyst
- Anika Patel
- Category
- Policy Change
- Messages
- 9
Conversation
j.smith
Customer
2026-09-21 13:52
We'd like to request a change to our security policy:
Request to block all traffic from Tor exit nodes
Please let us know if this is feasible and what the security implications would be.
Request to block all traffic from Tor exit nodes
Please let us know if this is feasible and what the security implications would be.
Anika Patel
SOC Analyst
2026-09-21 16:38
Good news — our analysis confirms this is a true positive. We've implemented the containment measures and will send a full incident summary within 24 hours.
j.smith
Customer
2026-09-21 19:46
That's reassuring. Can we schedule a call to discuss the remediation steps?
Anika Patel
SOC Analyst
2026-09-21 21:21
Good news — our analysis confirms this is a true positive. We've implemented the containment measures and will send a full incident summary within 24 hours.
j.smith
Customer
2026-09-21 22:04
The affected user has confirmed they changed their password. Can you verify MFA is active?
Anika Patel
SOC Analyst
2026-09-21 23:33
I've updated the DLP policy as requested. The HR shared drive is now excluded from the external transfer monitoring rule, but internal audit logging remains active.
j.smith
Customer
2026-09-22 00:20
Understood. Is there anything we need to do on our end in the meantime?
Anika Patel
SOC Analyst
2026-09-22 02:00
We've applied the policy change you requested. It will take effect within 15 minutes across all monitored endpoints. Please let us know if you see any issues.
j.smith
Customer
2026-09-22 03:28
The affected user has confirmed they changed their password. Can you verify MFA is active?