We are seeing traffic listed as ultrasurf simply by visiting https://s3.amazonaws.com. This seems to have just started in the last few days. Anybody else seeing this on Firesight?
We had a new ASA and Firesight installed a couple weeks ago and we see the exact same thing. Its reporting https://s3-us-west-1.amazonaws.com as web application Ultrasurf.
I have an open case on this issue but have not heard back from the TAC since submitting logs and pcaps. I'll update if I get a solution but it's obviously something in the software.
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
