Esa proxy traffic

[sv7]

Hello All,

We are using proxy server to access update and some required url for Esa to communicate. However I'm finding huge amount of traffic for below url's

updates.ironport.com

update-manifests.ironport.com

downloads.ironport.com.

Please find attached snapshot and let me know if it's legitimate traffic or not.

[balaji.bandi]

yes that is legitimate to get updates and signatures.

[sv7]

Hi,

Thank you for your reply. However it consumes GB'S of data. Is it a normal data consumption?. Or any way I can reduce bandwidth consumption?

[balaji.bandi]

Once the Database updated, then it only update incremental

is this new setup ?

you also have any option cloud option to send sampling data ?

[sv7]

 Please find below response.

is this new setup ?

Nope 

you also have any option cloud option to send sampling data ?

Didn't get this. Please elaborate