Forum Discussion
MDE alerts with "Network traffic proxy redirector detected"
Hello all, In our SOC, we've been seeing alerts on MDE for Mozilla Firefox with a combination of "Network traffic proxy redirector detected" and "Connection to a custom network indicator" to doma...
We have also been seeing this. I was thinking that it's the Firefox "Configure Proxy Access to the Internet" being set to 'auto-detect' or 'use system'. So I set it to "No Proxy" using GPO, but that doesn't appear to be it.
My organization also started getting these recently, always Firefox, always alongside a trigger for a network event like a custom network indicator.
I think it's related to this - https://support.mozilla.org/en-US/kb/how-stop-firefox-making-automatic-connections#w_loopback-connection
If accurate this is going to be a useless detection for Firefox. Has anyone seen this trigger on any other browsers?
I think it's related to this - https://support.mozilla.org/en-US/kb/how-stop-firefox-making-automatic-connections#w_loopback-connection
If accurate this is going to be a useless detection for Firefox. Has anyone seen this trigger on any other browsers?
