topic WSA IP address listed as top client's IP's with malware connections detected on the L4 traffic monitor in Web Security https://community.cisco.com/t5/web-security/wsa-ip-address-listed-as-top-client-s-ip-s-with-malware/m-p/2785631#M6151 <P>Hi I'd like to ask why is it that on our Ironport WSA. The WSA's IP address is listed as the top client's IP's with malware connections detected on the L4 traffic monitor?</P> <P></P> <P>Thanks,</P> <P>udimpas</P> Thu, 04 Feb 2016 02:22:09 GMT udimpas 2016-02-04T02:22:09Z WSA IP address listed as top client's IP's with malware connections detected on the L4 traffic monitor https://community.cisco.com/t5/web-security/wsa-ip-address-listed-as-top-client-s-ip-s-with-malware/m-p/2785631#M6151 <P>Hi I'd like to ask why is it that on our Ironport WSA. The WSA's IP address is listed as the top client's IP's with malware connections detected on the L4 traffic monitor?</P> <P></P> <P>Thanks,</P> <P>udimpas</P> Thu, 04 Feb 2016 02:22:09 GMT https://community.cisco.com/t5/web-security/wsa-ip-address-listed-as-top-client-s-ip-s-with-malware/m-p/2785631#M6151 udimpas 2016-02-04T02:22:09Z In WSA GUI>Security Service https://community.cisco.com/t5/web-security/wsa-ip-address-listed-as-top-client-s-ip-s-with-malware/m-p/2785632#M6152 <P>In WSA GUI&gt;Security Service&gt;L4TM, please select "All ports except Web Ports".</P> Thu, 04 Feb 2016 06:04:49 GMT https://community.cisco.com/t5/web-security/wsa-ip-address-listed-as-top-client-s-ip-s-with-malware/m-p/2785632#M6152 Tao Yang 2016-02-04T06:04:49Z