ATP reporting external IP as source
Hello,
I found this old thread but didn't find it helpful. https://community.sophos.com/sophos-xg-firewall/f/discussions/124646/atp-reporting-external-ip-as-source
From the ATP reports I am seeing Google and Cloudflare DNSs being reported.
…
alerts keep scaling
does anybody know what the cause of this alert ?
also i want to stop it from it source ?
ATP reports "C2/Generic-A" :
Hello some of our customers asked me about this so I think this will help others, too.
2021-10-18 10:24:07
192.168.36.181
enabaonag_laptop
192.168.36.1
C2/Generic-A
www.google.com.512542883555094…