Unwanted web proxy traffic *chckp.ctmail.com

[Romaryo]

Colleagues, hello everyone!

We have encountered the following phenomenon: we see that the gateways are constantly trying to connect to the proxy server

(proxysg:3128)

and access the following URLs.

*.chckp.ctmail.com (resolver*.chkp.ctmail.com)

This was our old web server, which has been decommissioned for more than six months.

In the Smart Console, both in the global settings and in the settings of the gateways themselves, the web proxy settings are deactivated.

Where else could we check or disable something? Has anyone experienced a similar situation?

Thank you all in advance!

[Vincent_Bacher]

I remember that the destination is used by anti spam blade.

Is this blade activated on those gateways?

I am unsure which proxy settings is relevant here but is the old proxy maybe defined in Gaia ? On clish 

show configuration proxy

or 

show proxy

[Romaryo]

[Vincent_Bacher]

I was just thinking about where else you could look for a proxy setting, but I can't think of anything else at the moment. Perhaps you should create a service request with Tac.
I assume that you pushed the policy after removing it in the Smart Console.

[the_rock · Accepted solution]

Make sure its not referenced anywhere in guidbedit...if so, delete it, install database and policy, test.

[Romaryo]

Yes, that was indeed the solution. I did have to restart the gateways, and that cleared the problem. Thanks!