topic CBS350-8T-E-2G Switch Requests ".deploy.static.akamaitechnologies.com" in Network Security

CBS350-8T-E-2G Switch Requests ".deploy.static.akamaitechnologies.com"

coalbl4ck — Tue, 12 Apr 2022 17:22:21 GMT

Hi,

i am new to CISCO equipment.

In my setup i have a CBS350-8T-E-2G connected to an OPNsense firewall.

Now, the switch sends requests to '2.17.186.22:80'.

According to ipinfo.io this IP belongs to Akami Technologies, which is a CDN.

This came to my attention, since the requests were flagged by OPNsense as Unsupported/Fake Windows NT version and Unsupported/ Fake Internet Explorer version.

I have blocked these requests and now they happen every 4 minutes.

Obviously i am not too happy about this, but couldn't find anything with google on this topic.

I am currently left with two questions:

1. Why is the switch even requesting data from WAN?

2. How do I disable it?

(My switch is running the latest OS version.)

Re: CBS350-8T-E-2G Switch Requests ".deploy.static.akamaitechnolo

Ann69 — Thu, 14 Apr 2022 04:28:22 GMT

@coalbl4ck wrote: Kroger eSchedule
Hi,

i am new to CISCO equipment.
In my setup i have a CBS350-8T-E-2G connected to an OPNsense firewall.
Now, the switch sends requests to '2.17.186.22:80'.
According to ipinfo.io this IP belongs to Akami Technologies, which is a CDN.

This came to my attention, since the requests were flagged by OPNsense as Unsupported/Fake Windows NT version and Unsupported/ Fake Internet Explorer version.
I have blocked these requests and now they happen every 4 minutes.

Obviously i am not too happy about this, but couldn't find anything with google on this topic.
I am currently left with two questions:
1. Why is the switch even requesting data from WAN?
2. How do I disable it?

(My switch is running the latest OS version.)

Akamai runs what's probably the world's largest set of caching servers. It wouldn't be malicious in itself. Microsoft's probably using it to handle a large chunk of Windows10 i/o - updates, telemetry.

Re: CBS350-8T-E-2G Switch Requests ".deploy.static.akamaitechnolo

coalbl4ck — Wed, 13 Apr 2022 13:06:11 GMT

Thanks for your input.

Unfortunately that's not it.

I don't have any Windows systems and the requests come directly from the switch's IP.