[IAG] Bypass deployment – Abnormal traffic sent from the management port

Problem Description

In bypass deployment, the management port sends a lot of traffic;

Effective troubleshooting steps

1. Packet capture and analysis show that the device redirects the rst rejection page message;
   
2. The browser can translate and determine the corresponding rejection strategy;
   
3. Disable the current policy for testing. If the traffic can return to normal, it can be determined that redirection is rejected. By statistically analyzing the composition of the message, the IP address with abnormal traffic can be determined, and the corresponding terminal can be shut down to resolve the problem.

solution

The terminal has abnormal request behavior, which causes abnormal traffic. The terminal should be shut down and virus detection and elimination should be performed to resolve the problem.

Operation Impact Scope

None

Original Link

https://support.sangfor.com.cn/cases/list?product_id=22&type=1&category_id=7753&isOpen=true