Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 4 subscribers
  • Views 791 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

App Control and protocol reporting WRONG!?

mfpck

Dear all,

During live monitoring of especially remote users traffic and web reporting I see a lot I mean too much traffic which is accounted for dhcp and dns which makes no sense.

Eg. tdy:

Is anybody able to clarify this ?



This thread was automatically locked due to age.
Parents
  • 0

    Hallo,

    Maybe it's not the UTM is generating all of that traffic...  Is the DHCP server log gigantic?  On the 'Bandwidth Usage' tab in 'Logging & Reporting >> Network Usage', can you see where this traffic originates?

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0

    Hallo,

    Maybe it's not the UTM is generating all of that traffic...  Is the DHCP server log gigantic?  On the 'Bandwidth Usage' tab in 'Logging & Reporting >> Network Usage', can you see where this traffic originates?

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
  • 0 in reply to BAlfson

    Hi,

    The Dhcp log not that gigantic I would say normal and unsuspicious and yes und loggind and reporting it shows the traffic whre it comes form correctly But I was curious because in Live view and the screenshot above it draws an odd image of traffic origins

Unfiltered HTML