SWG web logs shows outbound requests from itself (RuSafe Mode)


This article applies to:

  • SWG 10.x in RuSafe Mode

Question:

  • Why does SWG web logs shows outbound requests from itself? (The Client IP in the web logs is the same as the SWG IP address)

Information:

This is caused by the scanning engine's malware entrapment external resources pre-fetching.

Notes:

    To turn off external resources pre-fetching, follow these steps in the SWG web admin:

- Navigate to: Administration -> System Settings -> Scanning -> Scanning Engines
- Select Malware Entrapment on the left pane and click on Edit.
- Untick "Enable external resources pre-fetching"
- Save and Commit


Last Modified 7/25/2012.
https://support.trustwave.com/kb/KnowledgebaseArticle14868.aspx