Ever since we implemented the Sophos Web Appliance, we constantly see these spikes almost every night:
I have been trying to figure out what those spikes are using information from the Sophos Web Appliance logs, but have not been able to. We even have syslog going to our SEIM, but that isn't much help either. Has anyone seen this? Is it a bug? If not, any ideas how to figure out what this is? We don't even have 1000Mbps links (I wish).
Thanks.
This thread was automatically locked due to age.