Reverse direction in threat logs

[das]

When looking at the threat logs the vulnerability for spyware shows my servers as the attacker in the outbound direction. I have an inbound/outbound anti spyware policy and it caught jboss trying to access my network. Why does it show my servers as the attacker in the logs when the connection was initiated from the outside?

[wesa]

Hello Das,

Is there any proxy involved on this traffic. Logs shows servers IP?

[das]

There are no proxies that i know of.    

[UhMayYeah]

The Threat could be triggered by request or response packet.

Check the Direction in the session/ log details by clicking the magnifying glass icon alongside  the log in question.

-Ameya