topic Large amounts of google-base traffic in General Topics

Large amounts of google-base traffic

djr — Wed, 23 Aug 2017 08:29:59 GMT

I am looking into abusers of our bandwidth and have found one person who has 11GB in a day reported as google-base and from the low number of sessions (18), I suspect it's file transfer. I could understand tht much traffic being google drive but surely that would be reported as that sub category and not "base".

Why would large amounts of traffic be classified as google-base but not other more specific sub-categories?

Re: Large amounts of google-base traffic

reaper — Wed, 23 Aug 2017 09:04:43 GMT

Do you have SSL decryption enabled? Without decryption the firewall won't be able to look inside the flow and can't classify google sessions as anything other than google-base

Re: Large amounts of google-base traffic

djr — Wed, 23 Aug 2017 10:58:22 GMT

Yes thanks, that will be it, we don't do SSL decryption. Thanks, that's enough for me to look further.