Hi everyone,we're using a single ESA C300V with round about 1100 users. Our network team detected a huge amount of traffic on the ESA's external Interface (from/to Internet) on Port 80 and on Layer 7 "web-browsing" and asked me what's going on there....