Jun 26 08:57:46 CISCO-WFFPS01 FIREPOWER: Protocol: TCP, SrcIP: 10.107.48.225, OriginalClientIP: ::, DstIP: 88.212.196.101, SrcPort: 44927, DstPort: 443, TCPFlags: 0x0, IngressInterface: WIFI, EgressInterface: OUTSIDE, IngressZone: WIFI, EgressZone: OUTSIDE, DE: Primary Detection Engine (154744d8-7149-11e8-9b84-d63236626509), Policy: Default, ConnectType: End, AccessControlRuleName: PERMIT-ANY, AccessControlRuleAction: Allow, Prefilter Policy: Unknown, UserName: No Authentication Required, Client: SSL client, ApplicationProtocol: HTTPS, InitiatorPackets: 17, ResponderPackets: 12, InitiatorBytes: 5493, ResponderBytes: 2847, NAPPolicy: Balanced Security and Connectivity, DNSResponseType: No Error, Sinkhole: Unknown, URLCategory: Unknown, URLReputation: Risk unknown, URL: https://counter.yadro.ru


Jun 26 08:57:47 CISCO-WFFPS01 FIREPOWER: Protocol: TCP, SrcIP: 47.74.193.6, OriginalClientIP: ::, DstIP: 10.107.48.225, SrcPort: 5222, DstPort: 47886, TCPFlags: 0x0, IngressInterface: OUTSIDE, EgressInterface: WIFI, IngressZone: OUTSIDE, EgressZone: WIFI, DE: Primary Detection Engine (154744d8-7149-11e8-9b84-d63236626509), Policy: Default, ConnectType: End, AccessControlRuleName: PERMIT-ANY, AccessControlRuleAction: Allow, Prefilter Policy: Unknown, UserName: No Authentication Required, InitiatorPackets: 1, ResponderPackets: 1, InitiatorBytes: 103, ResponderBytes: 58, NAPPolicy: Balanced Security and Connectivity, DNSResponseType: No Error, Sinkhole: Unknown, URLCategory: Unknown, URLReputation: Risk unknown

Jun 26 09:00:53 CISCO-WFFPS01 FIREPOWER: Protocol: TCP, SrcIP: 64.233.162.211, OriginalClientIP: ::, DstIP: 10.107.48.225, SrcPort: 443, DstPort: 43037, TCPFlags: 0x0, IngressInterface: OUTSIDE, EgressInterface: WIFI, IngressZone: OUTSIDE, EgressZone: WIFI, DE: Primary Detection Engine (154744d8-7149-11e8-9b84-d63236626509), Policy: Default, ConnectType: Start, AccessControlRuleName: PERMIT-ANY, AccessControlRuleAction: Allow, Prefilter Policy: Unknown, UserName: No Authentication Required, InitiatorPackets: 2, ResponderPackets: 1, InitiatorBytes: 203, ResponderBytes: 58, NAPPolicy: Balanced Security and Connectivity, DNSResponseType: No Error, Sinkhole: Unknown, URLCategory: Unknown, URLReputation: Risk unknown

Jun 26 08:57:54 CISCO-WFFPS01 FIREPOWER: Protocol: TCP, SrcIP: 10.107.48.225, OriginalClientIP: ::, DstIP: 52.74.45.243, SrcPort: 48401, DstPort: 80, TCPFlags: 0x0, IngressInterface: WIFI, EgressInterface: OUTSIDE, IngressZone: WIFI, EgressZone: OUTSIDE, DE: Primary Detection Engine (154744d8-7149-11e8-9b84-d63236626509), Policy: Default, ConnectType: End, AccessControlRuleName: PERMIT-ANY, AccessControlRuleAction: Allow, Prefilter Policy: Unknown, UserName: No Authentication Required, UserAgent: Dalvik/2.1.0 (Linux; U; Android 7.0; Redmi Note 4 MIUI/V9.5.11.0.NCFMIFA), Client: Android browser, ClientVersion: 7.0, ApplicationProtocol: HTTP, InitiatorPackets: 5, ResponderPackets: 4, InitiatorBytes: 550, ResponderBytes: 398, NAPPolicy: Balanced Security and Connectivity, DNSResponseType: No Error, Sinkhole: Unknown, HTTPResponse: 204, ReferencedHost: connect.rom.miui.com, URLCategory: Unknown, URLReputation: Risk unknown, URL: http://connect.rom.miui.com/generate_204

Jun 26 08:58:07 CISCO-WFFPS01 FIREPOWER: Protocol: TCP, SrcIP: 10.107.48.225, OriginalClientIP: ::, DstIP: 87.240.129.76, SrcPort: 40884, DstPort: 443, TCPFlags: 0x0, IngressInterface: WIFI, EgressInterface: OUTSIDE, IngressZone: WIFI, EgressZone: OUTSIDE, DE: Primary Detection Engine (154744d8-7149-11e8-9b84-d63236626509), Policy: Default, ConnectType: End, AccessControlRuleName: PERMIT-ANY, AccessControlRuleAction: Allow, Prefilter Policy: Unknown, UserName: No Authentication Required, Client: SSL client, ApplicationProtocol: HTTPS, WebApplication: VKontakte, InitiatorPackets: 250, ResponderPackets: 282, InitiatorBytes: 22338, ResponderBytes: 295833, NAPPolicy: Balanced Security and Connectivity, DNSResponseType: No Error, Sinkhole: Unknown, URLCategory: Unknown, URLReputation: Risk unknown, URL: https://m.vk.com