Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 1 subscriber
  • Views 860 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

HTTP Proxy Operation is this normal?

Mark_D_01
Hi 2 days ago I noticed a big jump in usage. Tracked down to kaspersky.com 1.2Gb.
No rules or system changes have been made but instead of 28Mb from kaspersky.com it has now jumped to 1.2Gb.
I looked at the Content Filter Live Log and saw the below:-

2009:03:03-08:49:37 roxy73 httpproxy[3866]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="172.16.10.1" user="" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="26284" time="2108 ms" request="0x80d35f8" url="dnl-19.geo.kaspersky.com/.../dd-090227b.upk" exceptions="content,url,mime" error="" 

See Txt file for further info.
Is this the normal Proxy Function?

Thanks
Mark


This thread was automatically locked due to age.
Parents
  • 0
    Mark, if you're running in transparent mode, what happens if you add kapersky.com (nothing else) to your exceptions.
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0
    Mark, if you're running in transparent mode, what happens if you add kapersky.com (nothing else) to your exceptions.
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
  • 0 in reply to BAlfson
    Oops left that bit out didn't I.
    Proxy operating in Transparent mode.
    kaspersky.com is added to excepted list. Have played with various options day to see what difference and come up with the same result.

    Thanks
    Mark
  • 0 in reply to Mark_D_01
    That all looks normal to me.  None of the packets were blocked - everything was "pass" including in the text file.  You had created an exception that covered "content,url,mime" for Kapersky.

    From what I understand, the most important exception is "anti-virus" so you  might try adding that if these downloads seem to be strssing your Astaro box.

    CHeers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA