Application Control Sophos Framework Server

That would be HTTP traffic to AWS, like visiting Amazon, or something hosted perhaps?  HTTP traffic is internet web traffic, so ... it could really be anything internet related.  Even major companies host on AWS.

Hello, I use the Proxy in Transparent Mode, all Clients have the Certificate installed. No Client or Mobile has the Amazon App installed.

If I actually visit amazon website from a Client I see a new connection under Application marked as Amazon and the connection is with protocol 443/tcp secure.

So I'm wondering what is the Sophos Content Filter Framework Server Application connected to port 80/tcp unsecure ?

so checking further, I see the traffic just on eth1 my external wan interface, and now I see also Sophos UTM Up2Date Application...

So now my question, what exactly is the Sophos Content Filter Framework Server connection exactly for, and why are the UTMs connection to the Sophos Update Servers unsecured via Port 80??? How to fix? 

I believe this is going to be your web proxy content filtering.

ok, how to change that the UTM pick the Updates over SSL itself?

Found it here https://community.sophos.com/utm-firewall/b/blog/posts/utm-up2date-9-706-released

With Version 9.706 Secure Up2date over https connection should work.

Thx

Sally