I have a Fortigate 60E firewall with web filtering setup and started getting alerts one night from the firewall saying a few pc's and servers trying to access a site which is classed as phishing site, this site was storage.googleapis.com. see the below msg from firewall.
Service="HTTPS" hostname="[storage.googleapis.com](http://storage.googleapis.com/)" profile="default" action="blocked" reqtype="direct"
Can anyone explain this to me as why's the firewall is alerting us when pcs are unlikely going to it in the night especially the servers that have barely nothing on them especially nothing Google related.
Tested the pcs and servers so no malware or virus but wonder why they are going to that site in the night and never have before??
No comments:
Post a Comment