Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 2 replies
  • Answers 1 answer
  • Subscribers 28 subscribers
  • Views 8890 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Reports display application type secure socket layer protocol to the most traffics

Karim Ali

Hello,

I wanna ask a question, I want the reports to display the accurate domain for the user or the host not tell me that the application type is secure socket layer protocol only, i can't define what is the domains of this application type.

the below screenshot for the dashboard reports and displayed secure socket layer protocol is the most consumer for bandwidth but no accurate domains when i clicked on it.



This thread was automatically locked due to age.
  • 0

    1. Make sure you have application classification turned on.

    2. The the session is encrypted, firewall is not able to de-crypt the session and classify the application.

    3. You will have to keep HTTPS scanning (Decrypt and Scan) enabled in order to classify the SSL encryted traffic

  • 0

    Hi Karim ,

    The web filter and the application filter is completely different. We do not have signatures for all Websites, some are added because we do not rely on application filter to manage websites. We have web filtering for the same and you may check the details of the URL as per the number of times accessed and details with the timestamp.

    If you are accessing secured web sites then the logs you should observe is the Web filter logs, as for application you may need to consider the SSL as a requirement to access these websites and if they are in our application filter database it will be logged as an application otherwise it would be SSL.