This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Unusual Domains in Web Usage Report, e.g. 96.443

Hi,

today I stumbled over some quite unusual domain names in the web usage reports of UTM 9.105-9.

I see domains like the following in my report:

96.443
94.443
137.443

It looks like the firewall cuts the first byte of the destination IP address, adds a dot and concatenates the destination port to that string. Does anybody else experience that, too, or is some funky stuff going on in my network?

Regards
Alex

This thread was automatically locked due to age.

Parents

0 Michael Dunn over 11 years ago

Thanks Guy,

For everyone's info - the issue is that the app is actually doing something like:
http://1.2.3.4:443/

Which means it is doing http using an https port. This confuses reporting.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Michael Dunn over 11 years ago

Thanks Guy,

For everyone's info - the issue is that the app is actually doing something like:
http://1.2.3.4:443/

Which means it is doing http using an https port. This confuses reporting.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data