ASA see the proxy as attacker

ohassairi — Mon, 11 Mar 2019 16:33:36 GMT

we r using ASA5510 for internet link.

we activated basic threat detection.

to access internet users must use one BlueCoat Proxy.

in ASA i allowed all IP traffic coming from the proxy.

in firewall dashboard, under Top 10 protected servers under sync attack, i can see that my proxy is always an attacker for many external servers.

why this is happen? can i add my proxy as a trusted host?

Re: ASA see the proxy as attacker

Panos Kampanakis — Thu, 29 Oct 2009 16:55:03 GMT

threat-detection pulls statistic from the traffic of all the hosts. Since you proxy is doing all your http it is identified as a host that is "doing to much". It is normal.

You cannot disable it from showing up in the threat detection stats though.

I hope it helps.

topic Re: ASA see the proxy as attacker in Network Security

ASA see the proxy as attacker

Re: ASA see the proxy as attacker