I've started seeing a TON of traffic on our external interface ~20GB a day. Running the bandwidth usage report shows the "Top Client" as our external interface, looking at where the traffic is coming from it's all from google IP's. It doesn't appear that any of my users are doing it. None of my internal IP's show as using anywhere near that amount of traffic and the web usage report backs that up.
The application is listed as "Google Web search" but I can't get any more information than that. Has anyone seen this before? I've gone through all the bandwidth usage reports and web usage reports and can't seem to track it down. It's almost as if the firewall itself is doing it.
This thread was automatically locked due to age.
