This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Classification question

Hi folks,

a couple screenshots about unclassified protocols.

Considering these are known services I would have thought they should be classified as one of the first protocols of the block?

Why are they still unclassified?

Ian

This thread was automatically locked due to age.

Top Replies

MayurMakvana over 2 years ago +2

Hello, Greeting, This is likely to happen when an traffic generated from any application which is not connecting or generating ICMP error code which are likely to fall under the unclassified.

Parents

0 MayurMakvana over 2 years ago

Hello,

Greeting,

This is likely to happen when an traffic generated from any application which is not connecting or generating ICMP error code which are likely to fall under the unclassified.

Mayur Makvana
Technical Account Manager | Sophos Technical Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'This helped me' link.
Cancel
Vote Up +2 Vote Down

Cancel
0 rfcat_vk over 2 years ago in reply to MayurMakvana

Hi,

thank you for answering, but your answer does not make sense to me. Why would invalid traffic be logged and displayed in the daily report?

Ian

XG115W - v19.5.1 mr-1 - Home

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 MayurMakvana over 2 years ago in reply to rfcat_vk

Hello,

It is better to raise the case with the support to diagnose it further.

We have seen such instances in past. Its not the invalid traffic recorded in reports. Its the traffic where in application generates the ICMP request which has been added to the reports.

However, its better that we identifies those application with the help of support and your intervention would be required too to minimize it.

Mayur Makvana
Technical Account Manager | Sophos Technical Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 MayurMakvana over 2 years ago in reply to rfcat_vk

Hello,

It is better to raise the case with the support to diagnose it further.

We have seen such instances in past. Its not the invalid traffic recorded in reports. Its the traffic where in application generates the ICMP request which has been added to the reports.

However, its better that we identifies those application with the help of support and your intervention would be required too to minimize it.

Mayur Makvana
Technical Account Manager | Sophos Technical Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 rfcat_vk over 2 years ago in reply to MayurMakvana

The traffic is generated by my home XG connected through main XG for firmware updates.

Ian

XG115W - v19.5.1 mr-1 - Home

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Classification question

Top Replies

Submitted a Tech Support Case lately from the Support Portal?