During downloading config file, this can simply be the sep.cnf.xml file, locale files or firmware. This traffic is normally marked as best effort in the CallManager enterprise params. Would check the sniffer to see what is causing this. Also recommend to use 1.0.4.