Forum Discussion
MDE alerts with "Network traffic proxy redirector detected"
Hello all, In our SOC, we've been seeing alerts on MDE for Mozilla Firefox with a combination of "Network traffic proxy redirector detected" and "Connection to a custom network indicator" to doma...
We are observing the same activity. Any update on this?
I noticed that I am getting this alert when a user is using firefox browser to try and access a url that is being blocked by the EDR in the first place. For example, a malicious ad domain is being blocked by the EDR and I get a regular alert about a blocked malicious domain if the user uses any other browser that isn't firefox. When the same url and it is supposed to be blocked in the EDR and the browser used ais firefox, there seems to be this proxy alert being triggered.
Seems like a bug?