While examining the Firewall logs, I find allmost all (95%+) requests to https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/
are getting response codes 502 Bad Gateway from the webserver.
Some get 500 and only very few get 200.
Why is this happening.
The requests are made through XG firewall v18 mr5 so we can see thatr clear in the logs.
Of course this URL is excluded from all SSL scanning by default URL groups
The CA serving this Signed by Sophos SHA256 MCS Root CA3 which is unknown to XG. But as SSL Decryption is disabled, this should not be an issue.
2021-07-03 12:22:53,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="212" user="" user_group="" web_policy_id="4" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx5.66" dst_ip="52.57.55.128" protocol="TCP" src_port="59584" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="2067039488" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" , 2021-07-03 12:22:52,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.240" dst_ip="52.57.55.128" protocol="TCP" src_port="50307" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="2624050176" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" , 2021-07-03 12:20:28,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.226" dst_ip="3.126.142.231" protocol="TCP" src_port="60706" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="1199291904" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" , 2021-07-03 12:19:31,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.34" dst_ip="3.126.142.231" protocol="TCP" src_port="51297" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="4193390976" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" , 2021-07-03 12:10:39,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.26" dst_ip="18.185.204.77" protocol="TCP" src_port="49912" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="2340628032" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" , 2021-07-03 12:08:36,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.29" dst_ip="52.29.31.195" protocol="TCP" src_port="54196" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="1226561792" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" , 2021-07-03 12:02:38,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.26" dst_ip="52.29.127.85" protocol="TCP" src_port="49709" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="508162752" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" , 2021-07-03 12:00:29,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.226" dst_ip="52.57.55.128" protocol="TCP" src_port="60671" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="2178119936" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" , 2021-07-03 11:51:37,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.199" dst_ip="3.66.47.242" protocol="TCP" src_port="54321" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="2504986368" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" , 2021-07-03 11:44:48,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.20" dst_ip="52.29.127.85" protocol="TCP" src_port="35490" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="802876864" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" , 2021-07-03 11:41:24,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.237" dst_ip="18.198.68.56" protocol="TCP" src_port="59822" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="747644800" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" , 2021-07-03 11:39:16,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.236" dst_ip="35.156.69.124" protocol="TCP" src_port="53110" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="1411351488" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" , 2021-07-03 11:30:41,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.229" dst_ip="35.156.69.124" protocol="TCP" src_port="64569" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="2177015296" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" , 2021-07-03 11:29:11,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.11" dst_ip="52.28.156.103" protocol="TCP" src_port="55983" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="2931569024" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" , 2021-07-03 11:25:55,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.31" dst_ip="52.29.127.85" protocol="TCP" src_port="56702" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="770358784" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" , 2021-07-03 11:23:41,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.229" dst_ip="52.59.118.127" protocol="TCP" src_port="62627" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="1429827328" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" , 2021-07-03 11:23:27,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.229" dst_ip="52.57.55.128" protocol="TCP" src_port="62579" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="1427645696" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" , 2021-07-03 11:20:27,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.211" dst_ip="18.159.30.61" protocol="TCP" src_port="53962" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="1403526016" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" , 2021-07-03 11:18:06,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.120" dst_ip="3.66.130.48" protocol="TCP" src_port="64643" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="458617856" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" , 2021-07-03 11:17:11,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.15" dst_ip="52.29.127.85" protocol="TCP" src_port="36692" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="1411475008" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" , 2021-07-03 11:16:01,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.15" dst_ip="3.126.142.231" protocol="TCP" src_port="49746" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="985113856" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" , 2021-07-03 11:14:59,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.25" dst_ip="52.57.10.240" protocol="TCP" src_port="59722" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="1368724480" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" , 2021-07-03 11:03:17,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.80" dst_ip="18.185.204.77" protocol="TCP" src_port="62563" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="2076283904" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" , 2021-07-03 11:02:23,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.27" dst_ip="3.121.89.198" protocol="TCP" src_port="51664" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="1429827328" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" , 2021-07-03 11:00:13,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.29" dst_ip="18.185.204.77" protocol="TCP" src_port="51883" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="825516992" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" , 2021-07-03 10:58:52,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.11" dst_ip="18.198.68.56" protocol="TCP" src_port="55725" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="1996159232" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" , 2021-07-03 10:53:52,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.24" dst_ip="18.198.68.56" protocol="TCP" src_port="59976" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="4125453120" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" , 2021-07-03 10:47:48,messageid="16001" log_type="Content Filtering" log_component="HTTP" log_subtype="Allowed" status="" fw_rule_id="5" user="" user_group="" web_policy_id="2" web_policy="" category="None" category_type="" url="https://mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com/" content_type="" override_token="" response_code="" src_ip="xxx.xxx.xxx.228" dst_ip="18.159.30.61" protocol="TCP" src_port="51972" dst_port="443" bytes_sent="0" bytes_received="0" domain="mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com" exception="" activity_name="" reason="" user_agent="" status_code="502" transaction_id="" referer="" download_file_name="" download_file_type="" upload_file_name="" upload_file_type="" con_id="458594240" app_name="" app_is_cloud="0" override_name="" override_authorizer="" used_quota="0" ,
this is not helpful:
https://support.sophos.com/support/s/article/KB-000035229?language=en_US
and the status is asumed to be good:
This thread was automatically locked due to age.