It appears a large number of services are deploying this cookie named "ajs_anonymous_id". I think it comes from Google.
The cookie begins and ends with %22. This triggers Sophos UTM to think that EVERY request is a SQL Injection attack.
This thread was automatically locked due to age.
