I'm receiving a lot of IPS alerts with SID 57103 for diferent destination IPs.
Out of interest, if you open:
What is UseHttps set to?
Olá Fabio and welcome to the UTM Community!
Excellent and thorough explanation of the situation. I think this needs to have someone look at it - probably a 2nd- or 3rd-level engineer at Sophos Support as it involves both UTM and Intercept X. Please share with us what they conclude.
Cheers - Bob
Hi, thanks for the reply!
I'm testing the update change to HTTPS on these customers, but in parallel I'll trigger Sophos support as suggested. Having an answer from them I share with you.