FW:23500 Version:R80.10 Hotfix:R80_10_JUMBO_HF_Bundle_T56_sk11638
I have set hold mode,refer to screenshots below:
TP configuration as follow:
But the log shows as follow:
Connection was allowed because background classification mode was set. See sk74120 for more information.
"loop.sawmilliner.com" is a C2 and malware site,as follow:
I have set classification mode to hold,why still show "background classification mode was set"