Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 3 subscribers
  • Views 2690 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Still not clear on this..... interface traffic

Louis-M

Tried as I might over time, I'm not sure what the UTM is actually showing me with regards to traffic. For instance, in the above image, I can see 21.7mb traffic hitting the incoming into the internet connection.

Looking at the other interfaces, very little traffic is traversing them.

So, what is this traffic? I know I can click on the traffic bars and drill down but still no clue. Anybody shed any light on this?



This thread was automatically locked due to age.
Parents
  • 0

    After 190gb of Adobe traffic being registered, I throttled it down to 50kb and everything appears to be normal. It appears our SCCM server and manageengine patch connect plus automatically put adobe dc in with the client set to update. With 600 clients trying to update, it sort of clogged us up.

    That being said, I'm still not sure why it was showing the above with no clients downloading. All I know is that by throttling down to 50kb each source, it's now timing out which has solved the issue. I'll blacklist the site and remove the QoS to do it properly and hopefully the next update of the client won't get every client checking for individual updates.

  • 0 in reply to Louis-M

    Louis, my guess is that you'll find that the HTTP Proxy is trying to download a file and that the server on the other end keeps timing out because the Proxy is taking the time to run AV.  I suspect that you could skip AV for Adobe and solve this problem.  Any luck with that?

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0 in reply to Louis-M

    Louis, my guess is that you'll find that the HTTP Proxy is trying to download a file and that the server on the other end keeps timing out because the Proxy is taking the time to run AV.  I suspect that you could skip AV for Adobe and solve this problem.  Any luck with that?

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data
Unfiltered HTML