Content Analysis Appliance communicates with telemetry.cas.saas.broadcom.com

Products

• Content Analysis Software
• ISG Content Analysis

Issue/Introduction

Content Analysis (CAS) communicates with telemetry.cas.saas.broadcom.com, this URL is not present in the Required Ports, Protocols, and Services for Content Analysis.

We need to block CAS communication with this URL.

Cause

The URL telemetry.cas.saas.broadcom.com is actually a redirect URL from maa-updates.es.bluecoat.com & has the same function of Malware Analysis telemetry.

Resolution

The communication to telemetry.cas.saas.broadcom.com is valid. If you wish to disable this, perform the below steps:

1. Disable ma telemetry with the following CLI command:

ContentAnalysis(config)# ma-settings telemetry disable

2. Disable Symantec AV Telemetry:

In the GUI, under Services > AV Scanning behavior > Symantec Options : Enable Symantec AV Telemetry ---> Uncheck this box & save.