Investigated a Unifi Threat Management alert for Tor traffic... it was a false positive... sort of...