Commtouch IP addresses being blocked by XG

Hi,

why would commtouch be trying to connect to your XG on port 80?

Ina

Hi,

I have multiple connections from the US and UK from Commtouch servers logged on XG, all failing.

That is my precise question!

Thanks

Antonio

Hi,

i think, its caused by the stateful firewall and not an issue at all.

https://community.sophos.com/kb/en-us/131754

UTMs get their live lookups with Port 80 to Commtouch. And after a while, the server will try to reset the old connection.

Cheers

Hi,

So Sophos uses Commtouch for services...

Our system is constantly receiving "pings" from several Commtouch servers directed to the ports above 2000.

Have you found any indication on Sophos docs about their partners?

My main concern, after your post, is if our data is going outside europe.

We are bound to GDPR, as we're in Europe.

I will look into it.

Thanks!

Antonio Soares

Commtouch should only  be doing updates incoming if your XG initiates the connection. The issue seems to be that your XG or data service is dropping the connection and the Commtouch server is still sending the requested files.

Ian

Commtouch should only  be doing updates incoming if your XG initiates the connection. The issue seems to be that your XG or data service is dropping the connection and the Commtouch server is still sending the requested files.

Ian

Thanks.

I will investigate further.

We have other companies with XGs. Going to check them out.

BR