Hello,
18.04 for unknown reasons the Sophos XG dashboard displays large numbers of Misc attacks initiated from the Mikrotik CSS610-8P-2S+IN Switch (IP 192.168.3.4) on one of the computers (192.168.20.163). Do you know what it could be? I have IPS enabled on the firewall.
Mikrotik was the newest firmware.
Sophos logs and dashboard network attacts:
https://ibb.co/ZxJhT4j
https://ibb.co/D5W2bLY
https://ibb.co/gm9dKJM
https://ibb.co/5YwD1vN
https://ibb.co/0hPnQpP

This started appearing since I installed the Webex app.
I uninstalled the Webex app and no IPS events for now.