I have a web proxy ..tunnel filters...and AIP-SSM....inside of the network...i configure host service, network setting and hhtp-proxy to use my proxy when updating global corelation ...
On proxy I allow hhtps to 184.108.40.206 ---ironport service.
In proxy log I see that https to 220.127.116.11 is allowed and after that ips try to sending http packets to 18.104.22.168 -----I SEE in the RIPE that is AKAMAI technologies IP..address.
What is this?
Why my IPS - aip-ssm send requests to 22.214.171.124 port 80