SDWAN and ContentFilter

AndreaTosi

hi, me again...
i'm trying to setup contentfilter as a baseline security measure, allowing almost averithing but uncategorized or problematic categories.
Testing against the "Guest" zone, on one of the remote branches of our business, i've setup the rule as follows:


Guests are able to browse the Internet and they cannot reach my other vlans, ok...
I was testing if contentfilter is really denying access to problematic categories... opening a search engine, searched for "tor browser", opened their page and downloaded their software. That session should be denied because tor is an anonymizer ... and mcafee knows that:


What's wrong? also: is there any url to test your contentfilter against the many categories?
Thanks,
   Andrea