Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 8 replies
  • Subscribers 2 subscribers
  • Views 2224 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

cffsNN.astaro.com traffic

aimeedev
Hi

Whilst I was monitoring the WAN on my network, with Wireshark, I noticed a
lot of traffic to/from cffsNN.astaro.com (NN from 01 to 22).

Inspection of the packets, targeted to port 80, revealed nothing obvious.

This traffic appears to be triggered by any user accessing a website, though there may be other events not spotted so far.

Searching this board doesnt explain the purpose of this traffic, so I put the question to the experts.

Version is ASG Software 9.210-20

Thanks

Aimee


This thread was automatically locked due to age.
Parents
  • 0
    That's the cloud-based web filtering category lookups, normal behavior.  The new system (dubbed SXL) will also use cloud lookups, but different servers from the old cffs ones.  This is enabled by default in 9.3xx, and in 9.2/9.1 if you enable web filtering in the UTM Endpoint configuration.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Reply
  • 0
    That's the cloud-based web filtering category lookups, normal behavior.  The new system (dubbed SXL) will also use cloud lookups, but different servers from the old cffs ones.  This is enabled by default in 9.3xx, and in 9.2/9.1 if you enable web filtering in the UTM Endpoint configuration.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Children
No Data
Cookie Information Banner