Heavy connections for microsoft traffic

Eric_Lindsey1 — Wed, 09 Dec 2020 15:59:38 GMT

We have been working on High cpu issues with TAC on our 28800 clusterXL firewalls running 80.40 Take 83. We created a few secure xl rules for traffic outbound to Microsoft ip addresses. But every day I look and I have heavy connections to a new list of microsoft IP addresses. The url they use is tlu.dl.delivery.mp.microsoft.com/filestreamingservice and i see numerous pcs going to that url from within our network. All the traffic is on port 80 outbound to microsoft. Is there any way to fast accel all this traffic or do we need to keep adding rules.

Re: Heavy connections for microsoft traffic

PhoneBoy — Fri, 11 Dec 2020 16:54:15 GMT

The fast_accel option does not support URLs (that I recall).
If you want to fast_accel that traffic, you'll have to keep adding rules.
I imagine you could "script" the addition of these rules so they are automatically updated.

topic Heavy connections for microsoft traffic in General Topics

Heavy connections for microsoft traffic

Re: Heavy connections for microsoft traffic