[c-nsp] proxy anonymizer blocking

[Andrew Miehs]

On 24.07.2011, at 08:02, "madunix at gmail.com" <madunix at gmail.com> wrote:

> I am currently using a squid web filter to manage access to the
> Internet from office network beside ASA. I know anonymous proxies are
> hard to block because they are a constant moving target with new ones
> opening daily. My question is there away to test the headers of
> anonymous browsing and block it.

Wouldn't it be easier to block all outbound traffic and force your
users over the proxy?