This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Content Filter Framework Server

I was checking logs and statistics for my UTM and encountered a strange log under Bandwidth Usage. There is an entry under top servers and the IP of 69.64.36.103 and the hostname says colossus808.server4you.de. When I query this IP under Top Applications by server, it says Sophos Content Filter Framework Server. What is this traffic? It is the 6th top server in the list and today has transferred over 6GB of traffic. When I check the previous dates, this is consistently showing up in the top of the logs. Any info is appreciated.

This thread was automatically locked due to age.

0 BAlfson over 10 years ago

Tom, I think you should have your reseller get Sophos Support involved.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 tomrgsd over 10 years ago

I contacted support and this is the response I received.

"That addressing relates to web proxy content filter. The amount of traffic you see is indicative of user activity on the network"
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 10 years ago

I didn't your first post read closely enough to see that it was the sixth in the list by volume. I guess the RGSD would indeed have that volume of lookups. [:O]

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Sophos Content Filter Framework Server

Submitted a Tech Support Case lately from the Support Portal?