Customers observing high number of hits from Symantec Web isolation on firewall.
metrics.agent.datadoghq.com
5-8-4-app.agent.datadoghq.com
alb-metrics-agent-shard2-1030968321.us-east-1.elb.amazonaws.com
As per the logs this is not user traffic.
Release :
Component :
The URL used is for the Cloud Telemetry Data used by Web Isolations.
Details mentioned in the link below:
https://techdocs.broadcom.com/us/en/symantec-security-software/web-and-network-security/web-isolation/1-15/Symantec-Threat-Isolation-Overview/How-Symantec-Threat-Isolation/Cloud-Telemetry-Data.html
You can also disable it via CLI Command using the below Script
"sudo fgcli service stop Datadog-Agent"