SafeSquid Unusual Redirect Volume

Siddhant Mishra@Siddhant

•updated yesterday•0•0•0

Detects a rise in redirected web requests through the gateway. Redirection can indicate traffic being steered somewhere other than the user intended, whether by policy change or by interference further along the path. Onboarding: SAFESQUID-SWG is ingested via Syslog (Bloo extractor 812). Integration guide: https://bloo.io/docs/hypercloud/syslog-connector BQL (Bloo Query Language): stream=webfilter where sourcename='SAFESQUID-SWG' and action='URL_REDIRECTED' | duration 1h | groupby srcip, domain, url, category