WSA IP address listed as top client's IP's with malware connections detected on the L4 traffic monitor

[udimpas]

Hi I'd like to ask why is it that on our Ironport WSA. The WSA's IP address is listed as the top client's IP's with malware connections detected on the L4 traffic monitor?

Thanks,

udimpas

[Tao Yang]

In WSA GUI>Security Service>L4TM, please select "All ports except Web Ports".