Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 4 replies
  • Answers 2 answers
  • Subscribers 27 subscribers
  • Views 13641 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

"TORRENT CLIENTS P2P" concept in Live Connections, but there is any program on computers, any idea?

Miguel Cruz

 

 

Hi, im getting this on my XG Firewall, i dont know why, Im using windows 7 and 10, but there is not program such as Ares, Utorrent or any other. Does anybody have any idea? thanks.



This thread was automatically locked due to age.
Parents
  • 0

    Hi Miguel, 

    As I would see as per the logs there is an application using such connections and if you need to check which applications ran on your system. You may enable Audit on your system Event Viewer. I have tested out the process monitoring and you may set it up as per the link.

    I have tested with Utorrent application and seems to audit the process. Please use GPO to enable for all systems to monitor the applications used on their systems. An alternative is using Endpoint Protection and Security Control which would block/deny/allow the applications in your environment.

  • 0 in reply to Aditya Patel

    I was thinking something more like to know what sophos is taking as PS2 or Torrent, cuz as i said are new brand computers without any program of that kind :/ so i think Sophos take that description because the destination ip maybe? or how? is not a false positive alert?

     

    thanks both.

  • 0 in reply to Miguel Cruz

    Miguel,

    in order to help Sophos to investigate open a ticket with support. The other way, as I wrote before, is to find out the process that is consuming traffic and then share here which is the process.

    Regards

Reply Children
No Data