High number of hits to datadoghq.com

Products

• Web Isolation

Issue/Introduction

Customers observing high number of hits from Symantec Web isolation on firewall.

metrics.agent.datadoghq.com

5-8-4-app.agent.datadoghq.com

alb-metrics-agent-shard2-1030968321.us-east-1.elb.amazonaws.com

As per the logs this is not user traffic.

 

Environment

Release :

Component :

Cause

The URL used is for the Cloud Telemetry Data used by Web Isolations. 

Details mentioned in the link below:

https://techdocs.broadcom.com/us/en/symantec-security-software/web-and-network-security/web-isolation/1-15/Symantec-Threat-Isolation-Overview/How-Symantec-Threat-Isolation/Cloud-Telemetry-Data.html

Resolution

You can also disable it via CLI Command using the below Script

"sudo fgcli service stop Datadog-Agent"