This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Deluge of alerts CRIT-861 from multiple clients. 209.197.3.8

I am getting a ton of alerts from a bunch of my client firewalls (Crit-861 ATP) all pointing to 209.197.3.8 as the problem, but that apparently is used for Microsoft Update. Sooooooo, false alert I am guessing. Please fix this!

This thread was automatically locked due to age.

Top Replies

Amodin over 1 year ago +1 suggested

Sophos ATP DNS dropping *.hwcdn.net domains - General Discussion - UTM Firewall - Sophos Community Aside from the 5 other posts from this one about the same thing, they state in the link I gave that…

0 Amodin over 1 year ago

Sophos ATP DNS dropping *.hwcdn.net domains - General Discussion - UTM Firewall - Sophos Community

Aside from the 5 other posts from this one about the same thing, they state in the link I gave that it's been corrected.

OPNSense 64-bit | Intel Xeon 4-core v3 1225 3.20Ghz
16GB Memory | 500GB SSD HDD | ATT Fiber 1GB
(Former Sophos UTM Veteran, Former XG Rookie)
Cancel
Vote Up +1 Vote Down

Cancel
0 sratson over 1 year ago in reply to Amodin

Still getting alert reports... hope it rolls out quickly.
Cancel
Vote Up 0 Vote Down

Cancel
0 Amodin over 1 year ago in reply to sratson

I believe that it will update with the next pattern update (Up2Date). You can watch the logs, or refresh with a reboot and see if that helps.

OPNSense 64-bit | Intel Xeon 4-core v3 1225 3.20Ghz
16GB Memory | 500GB SSD HDD | ATT Fiber 1GB
(Former Sophos UTM Veteran, Former XG Rookie)
Cancel
Vote Up 0 Vote Down

Cancel