This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Still not clear on this..... interface traffic

Tried as I might over time, I'm not sure what the UTM is actually showing me with regards to traffic. For instance, in the above image, I can see 21.7mb traffic hitting the incoming into the internet connection.

Looking at the other interfaces, very little traffic is traversing them.

So, what is this traffic? I know I can click on the traffic bars and drill down but still no clue. Anybody shed any light on this?

This thread was automatically locked due to age.

0 Louis-M over 7 years ago

After 190gb of Adobe traffic being registered, I throttled it down to 50kb and everything appears to be normal. It appears our SCCM server and manageengine patch connect plus automatically put adobe dc in with the client set to update. With 600 clients trying to update, it sort of clogged us up.

That being said, I'm still not sure why it was showing the above with no clients downloading. All I know is that by throttling down to 50kb each source, it's now timing out which has solved the issue. I'll blacklist the site and remove the QoS to do it properly and hopefully the next update of the client won't get every client checking for individual updates.
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 7 years ago in reply to Louis-M

Louis, my guess is that you'll find that the HTTP Proxy is trying to download a file and that the server on the other end keeps timing out because the Proxy is taking the time to run AV. I suspect that you could skip AV for Adobe and solve this problem. Any luck with that?

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel