Sandblast Appliance connects to webex server ?

[dinhnv]

Dear all,

i am facing with situation that i do not make sure why does it happen ?

On SmartCenter, i can see TE appliance connects to webex server, it is detected by Firewall Core.

i would like to know, Why does it happen ?

[PhoneBoy]

Are you using Threat Emulation in MTA mode?
My guess is the gateway received a mail with a WebEx link and it's checking it. 
In addition to emulating the link when received, links can be scanned at click-time with a new feature: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

[dinhnv]

Hi,

Thank you for your reply 

Are you using Threat Emulation in MTA mode? Yes, TE in MTA mode.

My guess is the gateway received a mail with a WebEx link and it's checking it. I think so, but on log GUI, i cannot find any alert about that link is attached an email, one more, Links inside mall feature is disabled.

do you have any idea for this situation ?

[PhoneBoy]

Suggest a TAC case here.