Hello all,
Today we got blacklisted by Spaumhaus.
Our setup:
We have many companies sharing one big building and we have not "control" over all the companies but each and every one of the computers inside of the building will go through our Sophos UTM.
We are quite sure that one of the computers inside this building is infected by some sort of virus that is sending spam.
Is there a way to identify this computer by studying the Sophos UTM log-files?
Thanks for any help! :)
This thread was automatically locked due to age.
