Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Arturxr
Explorer

identify the servers on which the proxy server is installed

It is necessary to identify the servers on which the proxy server is installed. If there is a CheckPoint between the client and the proxy server, then we partially see this traffic, but this is only part of the total traffic.

 

for example: we have a rule that blocks port 3128, how can we find all traffic based on it?

Arturxr_1-1666081807917.png

it is necessary to develop a solution to determine proxy servers by the number of sessions or frequent access to search engines.

0 Kudos
2 Replies
G_W_Albrecht
Legend
Legend

Make a capture on all servers NIC for port 3128 and you will see which servers send such traffic.

CCSE CCTE CCSM SMB Specialist
0 Kudos
Chris_Atkinson
Employee Employee
Employee

Filter your logs based on the rule/service?

CCSM R77/R80/ELITE
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events