Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 11 replies
  • Answers 2 answers
  • Subscribers 5 subscribers
  • Views 12003 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Flow monitor inconsistencies between interfaces

DanielBarnes

I was using flow monitor to try and identify traffic going over our internet link.

eth0 is wan, eth1 is lan.

I was monitoring some traffic in flow control,

I opened eth0 in flow control, and then opened eth1.

I viewed some HD youtube videos for about 5 minutes then checked to see if I could find the result.

One interface identifies some traffic as Soundcloud, and the other identifies around the same amount of traffic ~190mb as youtube:

Has anyone else seen this behaviour before? Is it simply the UTM misidentifying the traffic as Soundcloud?

Cheers



This thread was automatically locked due to age.
  • 0 in reply to itdept-wehrship

    Hi mate. I've resolved the issue by enabling the HTTPS scan and decrypt on the Web Proxy module. We have complete reports now with all the website being categorized and tagged correctly. If you have trouble with the certificate on the web browsers afyer enabling the decrypt and scan let me know

Unfiltered HTML