This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Why has Little Snitch started flagging SophosWebIntelligence.bundle?

I'm using Yosemite 10.10.5, Little Snitch 3.5.3 and Sophos AV 9.40. Within the past few days I've started getting new alerts from LS about the SophosWebIntelllgence.bundle trying to access various sites, usually on ports 80 or 443, but often on other random (to me) ports, including 192.168.0.255 port 65001. I've made a rule in LS for ports 80and 443, but with the random ports they keep popping up every few hours. 

Why did this just start happening? Why not before? Suggestions....



This thread was automatically locked due to age.
  • The WebIntelligence service only connects to websites that were requested by a web browser or command line tools like curl. Using a tool like tcpdump or Wireshark to monitor network traffic on your external interface as well as 127.0.0.1 should reveal what is happening.

    ---

    Bob Cook (bob.cook@sophos.com) Director, Software Development