This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos XG - Report showing Attacker from Google IP

This is my first install of Sophos XG and have gone through the entire documentation. I can't find the rule or reason why the list of IP below are being marked as attacker. If you visit the IP, you end up on www.google.com.

Thank you for any assistance on this.

Nelson M

This thread was automatically locked due to age.

0 rfcat_vk over 6 years ago

Hi,

other parts of the report show you which application is doing the attacking.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 logics over 6 years ago in reply to rfcat_vk

sophos report.pdf

here is the copy of the PDF report. I know the IP of the victim but the computer is clean (double check with Carbon Black and Sophos AV).

Thank you for your help.

Nelson M
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 6 years ago in reply to logics

Seems to be this issue:

https://community.sophos.com/products/xg-firewall/f/intrusion-prevention/108443/reset-outside-window---false-alarm#pi2151=2
Cancel
Vote Up 0 Vote Down

Cancel