Starting over 24 hours ago, my XG firewall has my 3Mb/sec DSL line pegged downloading. The firewall itself is downloading. I've confirmed that it is not an inside host causig the traffic by monitoring the traffic on the LAN switch port that XG is connected to, the XG inside and outside interfaces, and by XG graphs - all ow which show 3Mb on the WAN interface, but almost nothing on the LAN side.
I've done a packet capture and can see the IP address XG is downloading from: 13.33.126.23 which resolves to server-13-33-126-23.ord50.r.cloudfront.net.
I'd like to think that this is just XG doing some sort of updates, but I can't believe it would be using this much data. Has my XG been hacked? I don't allow any management access from the outside interface.
This thread was automatically locked due to age.
