Dear All,
Hope you all are doing well
I have one strange issue here, Please find below details.
Network Details :
MX 84
MR 33 ( 5 Numbers )
MS 220
We have enabled content filtering on MX device and blocked some categories.
In device logs we found that our APs are trying to connect on Web Advertisement URL which we have blocked (PFB)
May 10 12:14:01 | AP1 | Content filtering blocked URL | url https://as-sec.casalemedia.com/..., server 104.108.197.118:443, category Web Advertisements |
Please suggest me why AP is trying to connect on it or Whether my AP have been compromised or what exactly issue is.
Please help me on this.
is your ssid in nat or bridge mode?
Thanks for your reply.
SSID is in NAT mode
so for your mx all client traffic is using the nat address so this could be any client that was connected to that AP.
i didn't get you, could you please explain it further.
Please suggest me SSID Mode to avoid this issue.
You can change the SSID to bridge mode and clients will be bridged to your wired network. Your MX or some other device on the network will need to run DHCP for the wireless clients.