07/06/2016 08:51:46	Notice	FortiShield	id=96851 user=DBLOG_SOURCE_SYSTEM msg="FortiShield is enabled"
07/06/2016 08:51:46	Notice	VPN	id=96602 msg="SSLVPN service started successfully." vpntype=ssl
07/06/2016 08:51:53	Warning	FortiShield	id=96855 msg="FortiShield blocked application: FortiClientOnl from modifying: \\REGISTRY\\MACHINE\\SOFTWARE\\WOW6432Node\\Fortinet\\FortiClient\\FA_UPDATE\\SoftwareUpdate\\IgnoreVersion"
07/06/2016 08:53:01	Notice	VPN	date=2016-06-07 time=08:53:00 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=sslvpn srcproduct=N/A srcip=N/A srcport=N/A direction=outbound destinationip=212.95.237.92 remotename=N/A destinationport=10443 user=N/A proto=6 rcvdbyte=2002440559 sentbyte=N/A utmaction=passthrough utmevent=vpn threat=connect vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service= url=N/A userinitiated=0 browsetime=N/A
07/06/2016 08:53:02	Notice	VPN	date=2016-06-07 time=08:53:01 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=sslvpn srcproduct=N/A srcip=N/A srcport=N/A direction=outbound destinationip=212.95.237.92 remotename=N/A destinationport=10443 user=SArmstrong proto=6 rcvdbyte=4294967296 sentbyte=N/A utmaction=passthrough utmevent=vpn threat=disconnect vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service= url=N/A userinitiated=0 browsetime=N/A
07/06/2016 08:53:07	Notice	VPN	date=2016-06-07 time=08:53:06 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=sslvpn srcproduct=N/A srcip=172.30.1.3 srcport=N/A direction=outbound destinationip=212.95.237.92 remotename=N/A destinationport=10443 user=SArmstrong proto=6 rcvdbyte=4294967459 sentbyte=1566 utmaction=passthrough utmevent=vpn threat=connect vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service= url=N/A userinitiated=0 browsetime=N/A
07/06/2016 08:53:07	Notice	VPN	id=96600 msg="SSLVPN tunnel status" vpnstate=connected vpntunnel="Swann VPN" vpntype=ssl
07/06/2016 08:53:13	Notice	VPN	FortiSslvpn: 5608: failed to add route for c0a80000:ffff0000, error code:5010
07/06/2016 08:57:50	Error	VPN	FortiSslvpn: 3488: poll_recv_ssl -> SSL_ERROR_WANT_WRITE
07/06/2016 08:57:49	Error	VPN	(repeated 1 times in last 0 sec) FortiSslvpn: 3488: poll_recv_ssl -> SSL_ERROR_WANT_WRITE
07/06/2016 08:57:50	Error	VPN	FortiSslvpn: 5072: poll_send_ssl -> SSL_ERROR_WANT_READ, try:5
07/06/2016 09:08:27	Notice	WebFilter	date=2016-06-07 time=09:08:26 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename="This document appears to be empty. It may be a scanned image that needs OCR or it may be a malformed document." destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/ userinitiated=1 browsetime=40
07/06/2016 09:15:55	Notice	WebFilter	date=2016-06-07 time=09:15:54 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.google.co.uk destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/webhp?sourceid=chrome-instant&ion=1&espv=2&ie=UTF-8 userinitiated=1 browsetime=15
07/06/2016 09:16:02	Notice	WebFilter	date=2016-06-07 time=09:16:01 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.google.co.uk destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/webhp?sourceid=chrome-instant&ion=1&espv=2&ie=UTF-8#q=green%20book%20bolt%20tightening%20torge userinitiated=1 browsetime=6
07/06/2016 09:16:07	Notice	WebFilter	date=2016-06-07 time=09:16:06 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.google.co.uk destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/webhp?sourceid=chrome-instant&ion=1&espv=2&ie=UTF-8#q=SCI+green+book+bolt+tightening+torque userinitiated=1 browsetime=5
07/06/2016 09:16:19	Notice	WebFilter	date=2016-06-07 time=09:16:18 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.steelconstruction.info destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/The_Green_Books userinitiated=1 browsetime=12
07/06/2016 09:16:25	Notice	WebFilter	date=2016-06-07 time=09:16:24 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.google.co.uk destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/webhp?sourceid=chrome-instant&ion=1&espv=2&ie=UTF-8#q=SCI+green+book+bolt+tightening+torque userinitiated=1 browsetime=5
07/06/2016 09:17:14	Notice	WebFilter	date=2016-06-07 time=09:17:13 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.andrewsfasteners.uk destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/wp-content/uploads/2014/08/Guidance-On-The-Tightening-of-Non-Pre-load-Fasteners.pdf userinitiated=1 browsetime=50
07/06/2016 09:24:16	Notice	WebFilter	date=2016-06-07 time=09:24:15 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.andrewsfasteners.uk destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/wp-content/uploads/2014/08/Guidance-On-The-Tightening-of-Non-Pre-load-Fasteners.pdf userinitiated=1 browsetime=50
07/06/2016 09:24:44	Notice	WebFilter	date=2016-06-07 time=09:24:43 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename="This document appears to be empty. It may be a scanned image that needs OCR or it may be a malformed document." destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/ userinitiated=1 browsetime=20
07/06/2016 09:25:23	Notice	WebFilter	date=2016-06-07 time=09:25:22 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.andrewsfasteners.uk destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/wp-content/uploads/2014/08/Guidance-On-The-Tightening-of-Non-Pre-load-Fasteners.pdf userinitiated=1 browsetime=7
07/06/2016 09:40:37	Notice	WebFilter	date=2016-06-07 time=09:40:36 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.google.co.uk destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/_/chrome/newtab?espv=2&ie=UTF-8 userinitiated=1 browsetime=2
07/06/2016 09:40:44	Notice	WebFilter	date=2016-06-07 time=09:40:43 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.google.co.uk destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/maps?hl=en userinitiated=1 browsetime=6
07/06/2016 10:00:06	Error	VPN	FortiSslvpn: 5072: poll_send_ssl -> SSL_ERROR_WANT_READ, try:3
07/06/2016 10:00:05	Error	VPN	(repeated 1 times in last 0 sec) FortiSslvpn: 5072: poll_send_ssl -> SSL_ERROR_WANT_READ, try:3
07/06/2016 10:00:06	Error	VPN	FortiSslvpn: 5072: poll_send_ssl -> SSL_ERROR_WANT_READ, try:5
07/06/2016 10:00:06	Error	VPN	FortiSslvpn: 5072: poll_send_ssl -> SSL_ERROR_WANT_READ, try:3
07/06/2016 11:00:22	Notice	WebFilter	date=2016-06-07 time=11:00:21 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename="This document appears to be empty. It may be a scanned image that needs OCR or it may be a malformed document." destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/ userinitiated=1 browsetime=24
07/06/2016 11:01:47	Notice	WebFilter	date=2016-06-07 time=11:01:46 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename="This document appears to be empty. It may be a scanned image that needs OCR or it may be a malformed document." destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/ userinitiated=1 browsetime=67
07/06/2016 11:08:07	Notice	VPN	FortiSslvpn: 5300: Ras: connection to fortissl terminated
07/06/2016 11:08:07	Notice	VPN	date=2016-06-07 time=11:08:06 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=sslvpn srcproduct=N/A srcip=172.30.1.3 srcport=N/A direction=outbound destinationip=212.95.237.92 remotename=N/A destinationport=10443 user=SArmstrong proto=6 rcvdbyte=4331445840 sentbyte=15421797 utmaction=passthrough utmevent=vpn threat=disconnect vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service= url=N/A userinitiated=0 browsetime=N/A
07/06/2016 11:36:55	Notice	WebFilter	date=2016-06-07 time=11:36:54 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.google.co.uk destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/maps?hl=en userinitiated=1 browsetime=3
07/06/2016 11:38:02	Notice	WebFilter	date=2016-06-07 time=11:38:01 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=tsbluebook.steel-sci.org destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/EN/Browsers/Main.htm userinitiated=1 browsetime=67
07/06/2016 11:45:18	Notice	WebFilter	date=2016-06-07 time=11:45:17 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=tsbluebook.steel-sci.org destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/EN/Browsers/Main.htm userinitiated=1 browsetime=189
07/06/2016 11:47:46	Notice	WebFilter	date=2016-06-07 time=11:47:45 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=tsbluebook.steel-sci.org destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/EN/Browsers/Main.htm userinitiated=1 browsetime=18
07/06/2016 11:47:50	Notice	WebFilter	date=2016-06-07 time=11:47:49 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.google.co.uk destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/webhp?sourceid=chrome-instant&ion=1&espv=2&ie=UTF-8 userinitiated=1 browsetime=3
07/06/2016 11:48:31	Notice	WebFilter	date=2016-06-07 time=11:48:30 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.google.co.uk destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/webhp?sourceid=chrome-instant&ion=1&espv=2&ie=UTF-8#q=shire+consultants userinitiated=1 browsetime=41
07/06/2016 11:48:35	Notice	WebFilter	date=2016-06-07 time=11:48:34 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.google.co.uk destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/_/chrome/newtab?espv=2&ie=UTF-8 userinitiated=1 browsetime=3
07/06/2016 11:48:40	Notice	WebFilter	date=2016-06-07 time=11:48:39 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.google.co.uk destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/maps?hl=en userinitiated=1 browsetime=4
07/06/2016 11:48:55	Notice	WebFilter	date=2016-06-07 time=11:48:54 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.google.co.uk destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/maps/@51.7422491,-2.2232547,14z?hl=en userinitiated=1 browsetime=15
07/06/2016 11:48:59	Notice	WebFilter	date=2016-06-07 time=11:48:58 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.google.co.uk/maps/place/Bromsgrove,+Worcestershire+B61+0SZ/@52.3541414,-2.0601121,17z/data=!3m1!4b1!4m5!3m4!1s0x487094b0479 destinationport=N/A user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/ userinitiated=1 browsetime=3
07/06/2016 11:49:02	Notice	WebFilter	date=2016-06-07 time=11:49:01 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.google.co.uk/maps/place/Bromsgrove,+Worcestershire+B61+0SZ/@52.3541414,-2.0601121,17z/data=!4m5!3m4!1s0x487094b04799ae2d destinationport=N/A user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/ userinitiated=1 browsetime=2
07/06/2016 11:49:18	Notice	WebFilter	date=2016-06-07 time=11:49:17 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.google.co.uk/maps/place/Bromsgrove,+Worcestershire+B61+0SZ/@52.3518882,-2.0585919,3a,75y,337.05h,90t/data=!3m7!1e1!3m5!1shH destinationport=N/A user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/ userinitiated=1 browsetime=16
07/06/2016 11:50:23	Notice	WebFilter	date=2016-06-07 time=11:50:22 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.shire-uk.com destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/contact-us/ userinitiated=1 browsetime=65
07/06/2016 11:50:25	Notice	WebFilter	date=2016-06-07 time=11:50:24 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.shire-uk.com destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/contact-us/ userinitiated=1 browsetime=2
07/06/2016 11:50:46	Notice	WebFilter	date=2016-06-07 time=11:50:45 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.google.co.uk/maps/place/Bromsgrove,+Worcestershire+B61+0SZ/@52.3518882,-2.0585919,3a,75y,64.79h,91.57t/data=!3m7!1e1!3m5!1s destinationport=N/A user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/ userinitiated=1 browsetime=20
07/06/2016 11:50:54	Notice	WebFilter	date=2016-06-07 time=11:50:53 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.google.co.uk destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/maps?hl=en userinitiated=1 browsetime=7
07/06/2016 11:50:56	Notice	WebFilter	date=2016-06-07 time=11:50:55 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.google.co.uk destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/maps/@52.3519323,-2.0583106,3a,75y,61.71h,71.37t/data=!3m6!1e1!3m4!1s4-FKsGXOacGwXymiMDtSkg!2e0!7i13312!8i6656?hl=en userinitiated=1 browsetime=2
07/06/2016 11:50:59	Notice	WebFilter	date=2016-06-07 time=11:50:58 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.google.co.uk destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/maps/@52.3519323,-2.0583106,3a,75y,270.4h,92.62t/data=!3m6!1e1!3m4!1s4-FKsGXOacGwXymiMDtSkg!2e0!7i13312!8i6656?hl=en userinitiated=1 browsetime=2
07/06/2016 11:51:10	Notice	WebFilter	date=2016-06-07 time=11:51:09 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.google.co.uk/maps/place/Bromsgrove,+Worcestershire+B61+0SZ/@52.3519323,-2.0583106,17z/data=!4m5!3m4!1s0x487094b04799ae2d destinationport=N/A user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/ userinitiated=1 browsetime=10
07/06/2016 11:51:28	Notice	WebFilter	date=2016-06-07 time=11:51:27 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.google.co.uk/maps/place/Bromsgrove,+Worcestershire+B61+0SZ/@52.3429536,-2.0787637,15.75z/data=!4m5!3m4!1s0x487094b04799ae2d destinationport=N/A user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/ userinitiated=1 browsetime=18
07/06/2016 11:51:35	Notice	WebFilter	date=2016-06-07 time=11:51:34 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=tsbluebook.steel-sci.org destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/EN/Browsers/Main.htm userinitiated=1 browsetime=6
07/06/2016 13:49:50	Notice	WebFilter	date=2016-06-07 time=13:49:49 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename="This document appears to be empty. It may be a scanned image that needs OCR or it may be a malformed document." destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/ userinitiated=1 browsetime=75
07/06/2016 14:05:49	Notice	WebFilter	date=2016-06-07 time=14:05:48 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=tsbluebook.steel-sci.org destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/EN/Browsers/Main.htm userinitiated=1 browsetime=163
07/06/2016 14:08:23	Notice	WebFilter	date=2016-06-07 time=14:08:22 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=tsbluebook.steel-sci.org destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/EN/Browsers/Main.htm userinitiated=1 browsetime=97
07/06/2016 14:10:06	Notice	WebFilter	date=2016-06-07 time=14:10:05 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename="This document appears to be empty. It may be a scanned image that needs OCR or it may be a malformed document." destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/ userinitiated=1 browsetime=52
07/06/2016 14:10:29	Notice	VPN	date=2016-06-07 time=14:10:28 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=sslvpn srcproduct=N/A srcip=172.30.1.1 srcport=N/A direction=outbound destinationip=212.95.237.92 remotename=N/A destinationport=10443 user=SArmstrong proto=6 rcvdbyte=12884902051 sentbyte=4294969204 utmaction=passthrough utmevent=vpn threat=connect vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service= url=N/A userinitiated=0 browsetime=N/A
07/06/2016 14:10:29	Notice	VPN	id=96600 msg="SSLVPN tunnel status" vpnstate=connected vpntunnel="Swann VPN" vpntype=ssl
07/06/2016 14:43:13	Notice	VPN	FortiSslvpn: 10476: Ras: connection to fortissl terminated
07/06/2016 14:43:13	Notice	VPN	date=2016-06-07 time=14:43:13 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=sslvpn srcproduct=N/A srcip=172.30.1.1 srcport=N/A direction=outbound destinationip=212.95.237.92 remotename=N/A destinationport=10443 user=SArmstrong proto=6 rcvdbyte=12897805329 sentbyte=4300465858 utmaction=passthrough utmevent=vpn threat=disconnect vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service= url=N/A userinitiated=0 browsetime=N/A
07/06/2016 14:44:00	Notice	WebFilter	date=2016-06-07 time=14:43:59 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=tsbluebook.steel-sci.org destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/EN/Browsers/Main.htm userinitiated=1 browsetime=4
07/06/2016 14:44:03	Notice	WebFilter	date=2016-06-07 time=14:44:02 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.google.co.uk destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/_/chrome/newtab?espv=2&ie=UTF-8 userinitiated=1 browsetime=3
07/06/2016 14:44:40	Notice	WebFilter	date=2016-06-07 time=14:44:39 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=data destinationport=N/A user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/html,chromewebdata userinitiated=1 browsetime=36
07/06/2016 14:44:46	Notice	WebFilter	date=2016-06-07 time=14:44:45 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.google.co.uk destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/search?q=bbc&oq=bbc&aqs=chrome..69i57j69i60l3j69i59l2.783j0j8&sourceid=chrome&ie=UTF-8 userinitiated=1 browsetime=7
07/06/2016 14:45:05	Notice	VPN	date=2016-06-07 time=14:45:04 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=sslvpn srcproduct=N/A srcip=172.30.1.5 srcport=N/A direction=outbound destinationip=212.95.237.92 remotename=N/A destinationport=10443 user=SArmstrong proto=6 rcvdbyte=21474836643 sentbyte=8589935830 utmaction=passthrough utmevent=vpn threat=connect vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service= url=N/A userinitiated=0 browsetime=N/A
07/06/2016 14:45:05	Notice	VPN	id=96600 msg="SSLVPN tunnel status" vpnstate=connected vpntunnel="Swann VPN" vpntype=ssl
07/06/2016 14:45:11	Notice	VPN	FortiSslvpn: 8696: failed to add route for c0a80000:ffff0000, error code:5010
07/06/2016 14:49:27	Notice	WebFilter	date=2016-06-07 time=14:49:26 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=1 destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/3 userinitiated=1 browsetime=165
07/06/2016 14:54:40	Warning	FortiShield	id=96855 msg="FortiShield blocked application: C:\\Windows\\System32\\svchost.exe from modifying: c:\\program files (x86)\\fortinet\\forticlient\\vir_sig:win32app_1"
07/06/2016 15:23:51	Notice	WebFilter	date=2016-06-07 time=15:23:50 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename="This document appears to be empty. It may be a scanned image that needs OCR or it may be a malformed document." destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/ userinitiated=1 browsetime=5
07/06/2016 15:25:19	Notice	WebFilter	date=2016-06-07 time=15:25:18 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename="This document appears to be empty. It may be a scanned image that needs OCR or it may be a malformed document." destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/ userinitiated=1 browsetime=17
07/06/2016 15:55:13	Notice	WebFilter	date=2016-06-07 time=15:55:12 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=1 destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/7 userinitiated=1 browsetime=5
07/06/2016 16:20:30	Notice	WebFilter	date=2016-06-07 time=16:20:29 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename="This document appears to be empty. It may be a scanned image that needs OCR or it may be a malformed document." destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/ userinitiated=1 browsetime=1
07/06/2016 16:27:42	Notice	WebFilter	date=2016-06-07 time=16:27:41 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename="This document appears to be empty. It may be a scanned image that needs OCR or it may be a malformed document." destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/ userinitiated=1 browsetime=10
07/06/2016 16:30:24	Notice	VPN	FortiSslvpn: 7140: Ras: connection to fortissl terminated
07/06/2016 16:30:26	Notice	VPN	date=2016-06-07 time=16:30:25 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=sslvpn srcproduct=N/A srcip=172.30.1.5 srcport=N/A direction=outbound destinationip=212.95.237.92 remotename=N/A destinationport=10443 user=SArmstrong proto=6 rcvdbyte=25769803776 sentbyte=12884901888 utmaction=passthrough utmevent=vpn threat=disconnect vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service= url=N/A userinitiated=0 browsetime=N/A
07/06/2016 16:30:59	Notice	WebFilter	date=2016-06-07 time=16:30:58 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.google.co.uk destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/search?q=bbc&oq=bbc&aqs=chrome..69i57j69i60l3j69i59l2.783j0j8&sourceid=chrome&ie=UTF-8 userinitiated=1 browsetime=4
07/06/2016 16:31:25	Notice	WebFilter	date=2016-06-07 time=16:31:24 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=data destinationport=N/A user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/html,chromewebdata userinitiated=1 browsetime=25
07/06/2016 16:31:27	Notice	WebFilter	date=2016-06-07 time=16:31:26 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.google.co.uk destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/search?q=bbc&oq=bbc&aqs=chrome..69i57j69i60l3j69i59l2.783j0j8&sourceid=chrome&ie=UTF-8 userinitiated=1 browsetime=2
07/06/2016 16:31:42	Notice	VPN	date=2016-06-07 time=16:31:41 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=sslvpn srcproduct=N/A srcip=172.30.1.6 srcport=N/A direction=outbound destinationip=212.95.237.92 remotename=N/A destinationport=10443 user=SArmstrong proto=6 rcvdbyte=30064771235 sentbyte=12884902956 utmaction=passthrough utmevent=vpn threat=connect vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service= url=N/A userinitiated=0 browsetime=N/A
07/06/2016 16:31:42	Notice	VPN	id=96600 msg="SSLVPN tunnel status" vpnstate=connected vpntunnel="Swann VPN" vpntype=ssl
07/06/2016 16:31:48	Notice	VPN	FortiSslvpn: 2996: failed to add route for c0a80000:ffff0000, error code:5010
07/06/2016 16:38:00	Notice	VPN	FortiSslvpn: 11340: Ras: connection to fortissl terminated
07/06/2016 16:38:02	Notice	VPN	date=2016-06-07 time=16:38:01 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=sslvpn srcproduct=N/A srcip=172.30.1.6 srcport=N/A direction=outbound destinationip=212.95.237.92 remotename=N/A destinationport=10443 user=SArmstrong proto=6 rcvdbyte=34359738368 sentbyte=17179869184 utmaction=passthrough utmevent=vpn threat=disconnect vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service= url=N/A userinitiated=0 browsetime=N/A
07/06/2016 16:38:57	Notice	WebFilter	date=2016-06-07 time=16:38:56 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.google.co.uk destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/search?q=bbc&oq=bbc&aqs=chrome..69i57j69i60l3j69i59l2.783j0j8&sourceid=chrome&ie=UTF-8 userinitiated=1 browsetime=16
07/06/2016 16:39:00	Notice	WebFilter	date=2016-06-07 time=16:38:59 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.google.co.uk destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/search?q=bbc&oq=bbc&aqs=chrome..69i57j69i60l3j69i59l2.783j0j8&sourceid=chrome&ie=UTF-8#q=problems+with+tp+link+powerlines+and+bt+router userinitiated=1 browsetime=2
07/06/2016 16:39:49	Notice	WebFilter	date=2016-06-07 time=16:39:48 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=data destinationport=N/A user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/html,chromewebdata userinitiated=1 browsetime=49
07/06/2016 16:40:22	Notice	WebFilter	date=2016-06-07 time=16:40:21 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.google.co.uk destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/search?sclient=psy-ab&q=problems+with+tp+link+powerlines+and+bt+router&oq=problems+with+tp+link+powerlines+and+bt+router&gs_l=serp.3...439286.451760.0.451880.46.29.0.0.0.0.0.0..0.0....0...1c.1.64.psy-ab..46.0.0.2tw6PH-WB24&pbx=1&bav=on.2,or.&bvm=bv.123664746,d.ZGg&biw=2133&bih=1087&dpr=0.9&ech=1&psi=zOhWV6CVA8rcgAaB_JXQCw.1465313484937.3&ei=zOhWV6CVA8rcgAaB_JXQCw&emsg=NCSR&noj=1 userinitiated=1 browsetime=33
07/06/2016 16:41:58	Notice	WebFilter	date=2016-06-07 time=16:41:57 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=community.bt.com destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/t5/Connected-Devices-Other/TP-Link-AV500-Mini-Powerline-issues-with-BT-Broadband/td-p/903376 userinitiated=1 browsetime=96
07/06/2016 16:51:43	Notice	VPN	date=2016-06-07 time=16:51:42 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=sslvpn srcproduct=N/A srcip=172.30.1.5 srcport=N/A direction=outbound destinationip=212.95.237.92 remotename=N/A destinationport=10443 user=SArmstrong proto=6 rcvdbyte=38654705827 sentbyte=17179871830 utmaction=passthrough utmevent=vpn threat=connect vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service= url=N/A userinitiated=0 browsetime=N/A
07/06/2016 16:51:43	Notice	VPN	id=96600 msg="SSLVPN tunnel status" vpnstate=connected vpntunnel="Swann VPN" vpntype=ssl
07/06/2016 16:53:51	Notice	WebFilter	date=2016-06-07 time=16:53:50 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=1 destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/7 userinitiated=1 browsetime=0
07/06/2016 16:54:37	Notice	WebFilter	date=2016-06-07 time=16:54:36 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=1 destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/7 userinitiated=1 browsetime=14
07/06/2016 17:10:11	Notice	WebFilter	date=2016-06-07 time=17:10:10 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=community.bt.com destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/t5/Connected-Devices-Other/TP-Link-AV500-Mini-Powerline-issues-with-BT-Broadband/td-p/903376 userinitiated=1 browsetime=9
07/06/2016 17:10:16	Notice	WebFilter	date=2016-06-07 time=17:10:15 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.google.co.uk destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/webhp?sourceid=chrome-instant&ion=1&espv=2&ie=UTF-8 userinitiated=1 browsetime=6
07/06/2016 17:14:42	Notice	WebFilter	date=2016-06-07 time=17:14:41 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.google.co.uk destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/webhp?sourceid=chrome-instant&ion=1&espv=2&ie=UTF-8#q=huawei userinitiated=1 browsetime=4
07/06/2016 17:14:54	Notice	WebFilter	date=2016-06-07 time=17:14:53 logver=1 type=traffic level=notice sessionid=27435136 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=1 destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/7 userinitiated=1 browsetime=4
07/06/2016 17:15:04	Notice	VPN	FortiSslvpn: 4608: Ras: connection to fortissl terminated
07/06/2016 17:21:02	Notice	FortiShield	id=96851 user=DBLOG_SOURCE_SYSTEM msg="FortiShield is enabled"
07/06/2016 17:21:02	Notice	VPN	id=96602 msg="SSLVPN service started successfully." vpntype=ssl
08/06/2016 07:54:56	Notice	FortiShield	id=96851 user=DBLOG_SOURCE_SYSTEM msg="FortiShield is enabled"
08/06/2016 07:54:56	Notice	VPN	id=96602 msg="SSLVPN service started successfully." vpntype=ssl
08/06/2016 07:58:49	Notice	VPN	date=2016-06-08 time=07:58:48 logver=1 type=traffic level=notice sessionid=27435140 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=sslvpn srcproduct=N/A srcip=N/A srcport=N/A direction=outbound destinationip=212.95.237.92 remotename=N/A destinationport=10443 user=N/A proto=6 rcvdbyte=1968165231 sentbyte=N/A utmaction=passthrough utmevent=vpn threat=connect vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service= url=N/A userinitiated=0 browsetime=N/A
08/06/2016 07:58:50	Notice	VPN	date=2016-06-08 time=07:58:49 logver=1 type=traffic level=notice sessionid=27435140 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=sslvpn srcproduct=N/A srcip=N/A srcport=N/A direction=outbound destinationip=212.95.237.92 remotename=N/A destinationport=10443 user=SArmstrong proto=6 rcvdbyte=4294967296 sentbyte=N/A utmaction=passthrough utmevent=vpn threat=disconnect vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service= url=N/A userinitiated=0 browsetime=N/A
08/06/2016 07:58:55	Notice	VPN	date=2016-06-08 time=07:58:54 logver=1 type=traffic level=notice sessionid=27435140 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=sslvpn srcproduct=N/A srcip=172.30.1.2 srcport=N/A direction=outbound destinationip=212.95.237.92 remotename=N/A destinationport=10443 user=SArmstrong proto=6 rcvdbyte=4294967459 sentbyte=1708 utmaction=passthrough utmevent=vpn threat=connect vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service= url=N/A userinitiated=0 browsetime=N/A
08/06/2016 07:58:55	Notice	VPN	id=96600 msg="SSLVPN tunnel status" vpnstate=connected vpntunnel="Swann VPN" vpntype=ssl
08/06/2016 08:02:53	Notice	WebFilter	date=2016-06-08 time=08:02:52 logver=1 type=traffic level=notice sessionid=27435140 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=1 destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/1 userinitiated=1 browsetime=37
08/06/2016 08:06:53	Notice	WebFilter	date=2016-06-08 time=08:06:52 logver=1 type=traffic level=notice sessionid=27435140 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=iexplore.exe srcproduct="Internet Explorer" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.google.co.uk destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/ userinitiated=1 browsetime=13
08/06/2016 08:06:59	Notice	WebFilter	date=2016-06-08 time=08:06:58 logver=1 type=traffic level=notice sessionid=27435140 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=iexplore.exe srcproduct="Internet Explorer" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=focalpoint.swanngroupltd.com destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/FocalPoint/Logon/Logon.aspx?ReturnUrl=%2fFocalPoint userinitiated=1 browsetime=6
08/06/2016 08:07:05	Notice	WebFilter	date=2016-06-08 time=08:07:04 logver=1 type=traffic level=notice sessionid=27435140 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=iexplore.exe srcproduct="Internet Explorer" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=focalpoint.swanngroupltd.com destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/FocalPoint/Homepage.aspx userinitiated=1 browsetime=5
08/06/2016 08:07:13	Notice	WebFilter	date=2016-06-08 time=08:07:12 logver=1 type=traffic level=notice sessionid=27435140 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=iexplore.exe srcproduct="Internet Explorer" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=focalpoint.swanngroupltd.com destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/FocalPoint/Inbox/Inbox.aspx userinitiated=1 browsetime=8
08/06/2016 08:07:26	Notice	WebFilter	date=2016-06-08 time=08:07:25 logver=1 type=traffic level=notice sessionid=27435140 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=iexplore.exe srcproduct="Internet Explorer" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=focalpoint.swanngroupltd.com destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/FocalPoint/Absence/EditHoliday.aspx?Key=A4589&showreject=y&approver=SDA userinitiated=1 browsetime=12
08/06/2016 08:08:26	Notice	WebFilter	date=2016-06-08 time=08:08:25 logver=1 type=traffic level=notice sessionid=27435140 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=iexplore.exe srcproduct="Internet Explorer" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=focalpoint.swanngroupltd.com destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/FocalPoint/Inbox/Inbox.aspx userinitiated=1 browsetime=60
08/06/2016 08:08:52	Notice	WebFilter	date=2016-06-08 time=08:08:51 logver=1 type=traffic level=notice sessionid=27435140 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=iexplore.exe srcproduct="Internet Explorer" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=focalpoint.swanngroupltd.com destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/FocalPoint/Inbox/Inbox.aspx userinitiated=1 browsetime=26
08/06/2016 08:10:21	Notice	WebFilter	date=2016-06-08 time=08:10:20 logver=1 type=traffic level=notice sessionid=27435140 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename="This document appears to be empty. It may be a scanned image that needs OCR or it may be a malformed document." destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/ userinitiated=1 browsetime=34
08/06/2016 08:16:48	Notice	WebFilter	date=2016-06-08 time=08:16:47 logver=1 type=traffic level=notice sessionid=27435140 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename="This document appears to be empty. It may be a scanned image that needs OCR or it may be a malformed document." destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/ userinitiated=1 browsetime=7
08/06/2016 08:33:29	Notice	WebFilter	date=2016-06-08 time=08:33:28 logver=1 type=traffic level=notice sessionid=27435140 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=1 destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/4 userinitiated=1 browsetime=4
08/06/2016 08:35:46	Notice	WebFilter	date=2016-06-08 time=08:35:45 logver=1 type=traffic level=notice sessionid=27435140 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=1 destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/1 userinitiated=1 browsetime=7
08/06/2016 08:47:55	Notice	WebFilter	date=2016-06-08 time=08:47:54 logver=1 type=traffic level=notice sessionid=27435140 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=iexplore.exe srcproduct="Internet Explorer" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=focalpoint.swanngroupltd.com destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/FocalPoint/Inbox/Inbox.aspx userinitiated=1 browsetime=10
08/06/2016 08:48:33	Notice	WebFilter	date=2016-06-08 time=08:48:32 logver=1 type=traffic level=notice sessionid=27435140 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=iexplore.exe srcproduct="Internet Explorer" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=focalpoint.swanngroupltd.com destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/FocalPoint/Absence/HolidayCal.aspx userinitiated=1 browsetime=39
08/06/2016 08:54:52	Notice	WebFilter	date=2016-06-08 time=08:54:51 logver=1 type=traffic level=notice sessionid=27435140 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=iexplore.exe srcproduct="Internet Explorer" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=focalpoint.swanngroupltd.com destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/FocalPoint/Inbox/Inbox.aspx userinitiated=1 browsetime=100
08/06/2016 09:19:07	Notice	VPN	FortiSslvpn: 3480: Ras: connection to fortissl terminated
08/06/2016 09:19:07	Notice	VPN	date=2016-06-08 time=09:19:06 logver=1 type=traffic level=notice sessionid=27435140 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=sslvpn srcproduct=N/A srcip=172.30.1.2 srcport=N/A direction=outbound destinationip=212.95.237.92 remotename=N/A destinationport=10443 user=SArmstrong proto=6 rcvdbyte=4305082955 sentbyte=4060494 utmaction=passthrough utmevent=vpn threat=disconnect vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service= url=N/A userinitiated=0 browsetime=N/A
08/06/2016 09:34:49	Notice	WebFilter	date=2016-06-08 time=09:34:48 logver=1 type=traffic level=notice sessionid=27435140 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=iexplore.exe srcproduct="Internet Explorer" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=focalpoint.swanngroupltd.com destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/FocalPoint/Inbox/Inbox.aspx userinitiated=1 browsetime=1
08/06/2016 10:02:49	Notice	WebFilter	date=2016-06-08 time=10:02:48 logver=1 type=traffic level=notice sessionid=27435140 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=focalpoint.swanngroupltd.com destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/FocalPoint/Logon/Logon.aspx?ReturnUrl=%2fFocalPoint userinitiated=1 browsetime=7
08/06/2016 10:02:55	Notice	WebFilter	date=2016-06-08 time=10:02:54 logver=1 type=traffic level=notice sessionid=27435140 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=tsbluebook.steel-sci.org destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/EN/Browsers/Main.htm userinitiated=1 browsetime=7
08/06/2016 10:03:11	Error	VPN	FortiSslvpn: 8864: Ras : connection to fortissl failed : 0:0:
08/06/2016 10:03:30	Notice	WebFilter	date=2016-06-08 time=10:03:29 logver=1 type=traffic level=notice sessionid=27435140 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename="This document appears to be empty. It may be a scanned image that needs OCR or it may be a malformed document." destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/ userinitiated=1 browsetime=1
08/06/2016 10:05:12	Notice	WebFilter	date=2016-06-08 time=10:05:11 logver=1 type=traffic level=notice sessionid=27435140 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=1 destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/1 userinitiated=1 browsetime=23
08/06/2016 10:06:45	Notice	WebFilter	date=2016-06-08 time=10:06:44 logver=1 type=traffic level=notice sessionid=27435140 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename="This document appears to be empty. It may be a scanned image that needs OCR or it may be a malformed document." destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/ userinitiated=1 browsetime=20
08/06/2016 10:06:57	Notice	WebFilter	date=2016-06-08 time=10:06:56 logver=1 type=traffic level=notice sessionid=27435140 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename="This document appears to be empty. It may be a scanned image that needs OCR or it may be a malformed document." destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/ userinitiated=1 browsetime=12
08/06/2016 10:08:39	Notice	WebFilter	date=2016-06-08 time=10:08:38 logver=1 type=traffic level=notice sessionid=27435140 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=1 destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/1 userinitiated=1 browsetime=52
08/06/2016 11:08:08	Notice	WebFilter	date=2016-06-08 time=11:08:07 logver=1 type=traffic level=notice sessionid=27435140 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=tsbluebook.steel-sci.org destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/EN/Browsers/Main.htm userinitiated=1 browsetime=40
08/06/2016 11:08:47	Notice	WebFilter	date=2016-06-08 time=11:08:46 logver=1 type=traffic level=notice sessionid=27435140 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.globalprizecentre.net destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/errors/blocked.htm userinitiated=1 browsetime=38
08/06/2016 11:10:35	Notice	WebFilter	date=2016-06-08 time=11:10:34 logver=1 type=traffic level=notice sessionid=27435140 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.scamnet.wa.gov.au destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/scamnet/Scam_Types-Prizes_and_Lotteries.htm userinitiated=1 browsetime=108
08/06/2016 11:13:42	Notice	WebFilter	date=2016-06-08 time=11:13:41 logver=1 type=traffic level=notice sessionid=27435140 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.scamnet.wa.gov.au destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/scamnet/Scam_Types-Prizes_and_Lotteries.htm userinitiated=1 browsetime=187
08/06/2016 11:14:16	Notice	WebFilter	date=2016-06-08 time=11:14:15 logver=1 type=traffic level=notice sessionid=27435140 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=tsbluebook.steel-sci.org destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/EN/Browsers/Main.htm userinitiated=1 browsetime=0
08/06/2016 11:15:24	Notice	WebFilter	date=2016-06-08 time=11:15:23 logver=1 type=traffic level=notice sessionid=27435140 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.scamnet.wa.gov.au destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/scamnet/Scam_Types-Prizes_and_Lotteries.htm userinitiated=1 browsetime=68
08/06/2016 11:17:44	Notice	WebFilter	date=2016-06-08 time=11:17:43 logver=1 type=traffic level=notice sessionid=27435140 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=1 destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/1 userinitiated=1 browsetime=7
08/06/2016 11:41:03	Notice	WebFilter	date=2016-06-08 time=11:41:02 logver=1 type=traffic level=notice sessionid=27435140 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename="This document appears to be empty. It may be a scanned image that needs OCR or it may be a malformed document." destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/ userinitiated=1 browsetime=2
08/06/2016 11:41:10	Notice	WebFilter	date=2016-06-08 time=11:41:09 logver=1 type=traffic level=notice sessionid=27435140 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename="This document appears to be empty. It may be a scanned image that needs OCR or it may be a malformed document." destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/ userinitiated=1 browsetime=2
08/06/2016 11:46:52	Error	VPN	FortiSslvpn: 5752: Ras : connection to fortissl failed : 0:0:
08/06/2016 11:50:01	Error	VPN	FortiSslvpn: 10024: Ras : connection to fortissl failed : 0:0:
08/06/2016 11:51:41	Notice	WebFilter	date=2016-06-08 time=11:51:40 logver=1 type=traffic level=notice sessionid=27435140 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=1 destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/8 userinitiated=1 browsetime=15
08/06/2016 11:51:44	Notice	WebFilter	date=2016-06-08 time=11:51:43 logver=1 type=traffic level=notice sessionid=27435140 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=2 destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/8 userinitiated=1 browsetime=3
08/06/2016 11:52:20	Notice	WebFilter	date=2016-06-08 time=11:52:19 logver=1 type=traffic level=notice sessionid=27435140 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=1 destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/8 userinitiated=1 browsetime=6
08/06/2016 11:52:22	Notice	WebFilter	date=2016-06-08 time=11:52:21 logver=1 type=traffic level=notice sessionid=27435140 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=2 destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/8 userinitiated=1 browsetime=2
08/06/2016 11:57:50	Error	VPN	FortiSslvpn: 1708: Ras : connection to fortissl failed : 0:0:
08/06/2016 11:58:13	Notice	WebFilter	date=2016-06-08 time=11:58:12 logver=1 type=traffic level=notice sessionid=27435140 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=tsbluebook.steel-sci.org destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/EN/Browsers/Main.htm userinitiated=1 browsetime=7
08/06/2016 11:58:21	Notice	WebFilter	date=2016-06-08 time=11:58:20 logver=1 type=traffic level=notice sessionid=27435140 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.btwifi.com destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/ userinitiated=1 browsetime=8
08/06/2016 11:58:36	Error	VPN	FortiSslvpn: 4720: Ras : connection to fortissl failed : 0:0:
08/06/2016 11:59:51	Notice	FortiShield	id=96851 user=DBLOG_SOURCE_SYSTEM msg="FortiShield is enabled"
08/06/2016 11:59:51	Notice	VPN	id=96602 msg="SSLVPN service started successfully." vpntype=ssl
08/06/2016 12:01:46	Notice	VPN	date=2016-06-08 time=12:01:45 logver=1 type=traffic level=notice sessionid=27501228 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=sslvpn srcproduct=N/A srcip=N/A srcport=N/A direction=outbound destinationip=212.95.237.92 remotename=N/A destinationport=10443 user=N/A proto=6 rcvdbyte=1962266991 sentbyte=N/A utmaction=passthrough utmevent=vpn threat=connect vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service= url=N/A userinitiated=0 browsetime=N/A
08/06/2016 12:01:47	Notice	VPN	date=2016-06-08 time=12:01:46 logver=1 type=traffic level=notice sessionid=27501228 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=sslvpn srcproduct=N/A srcip=N/A srcport=N/A direction=outbound destinationip=212.95.237.92 remotename=N/A destinationport=10443 user=SArmstrong proto=6 rcvdbyte=4294967296 sentbyte=N/A utmaction=passthrough utmevent=vpn threat=disconnect vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service= url=N/A userinitiated=0 browsetime=N/A
08/06/2016 12:01:52	Notice	VPN	date=2016-06-08 time=12:01:51 logver=1 type=traffic level=notice sessionid=27501228 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=sslvpn srcproduct=N/A srcip=172.30.1.1 srcport=N/A direction=outbound destinationip=212.95.237.92 remotename=N/A destinationport=10443 user=SArmstrong proto=6 rcvdbyte=4294967459 sentbyte=1790 utmaction=passthrough utmevent=vpn threat=connect vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service= url=N/A userinitiated=0 browsetime=N/A
08/06/2016 12:01:52	Notice	VPN	id=96600 msg="SSLVPN tunnel status" vpnstate=connected vpntunnel="Swann VPN" vpntype=ssl
08/06/2016 12:01:57	Notice	VPN	FortiSslvpn: 7432: failed to add route for c0a80000:ffff0000, error code:5010
08/06/2016 12:03:08	Error	VPN	FortiSslvpn: 7488: poll_send_ssl -> SSL_ERROR_WANT_READ, try:3
08/06/2016 12:03:08	Error	VPN	FortiSslvpn: 7736: poll_recv_ssl -> SSL_ERROR_WANT_WRITE
08/06/2016 12:03:08	Error	VPN	FortiSslvpn: 7488: poll_send_ssl -> SSL_ERROR_WANT_READ, try:3
08/06/2016 12:03:08	Error	VPN	FortiSslvpn: 7488: poll_send_ssl -> SSL_ERROR_WANT_READ, try:5
08/06/2016 12:03:08	Error	VPN	FortiSslvpn: 7488: poll_send_ssl -> SSL_ERROR_WANT_READ, try:3
08/06/2016 12:03:08	Error	VPN	FortiSslvpn: 7736: poll_recv_ssl -> SSL_ERROR_WANT_WRITE
08/06/2016 12:03:17	Notice	WebFilter	date=2016-06-08 time=12:03:16 logver=1 type=traffic level=notice sessionid=27501228 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename="This document appears to be empty. It may be a scanned image that needs OCR or it may be a malformed document." destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/ userinitiated=1 browsetime=33
08/06/2016 12:05:54	Error	VPN	FortiSslvpn: 7736: poll_recv_ssl -> SSL_ERROR_WANT_WRITE
08/06/2016 12:05:53	Error	VPN	(repeated 1 times in last 0 sec) FortiSslvpn: 7736: poll_recv_ssl -> SSL_ERROR_WANT_WRITE
08/06/2016 12:07:54	Notice	WebFilter	date=2016-06-08 time=12:07:53 logver=1 type=traffic level=notice sessionid=27501228 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename="This document appears to be empty. It may be a scanned image that needs OCR or it may be a malformed document." destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/ userinitiated=1 browsetime=72
08/06/2016 12:08:46	Notice	WebFilter	date=2016-06-08 time=12:08:45 logver=1 type=traffic level=notice sessionid=27501228 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename="This document appears to be empty. It may be a scanned image that needs OCR or it may be a malformed document." destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/ userinitiated=1 browsetime=3
08/06/2016 12:09:45	Notice	WebFilter	date=2016-06-08 time=12:09:44 logver=1 type=traffic level=notice sessionid=27501228 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename="This document appears to be empty. It may be a scanned image that needs OCR or it may be a malformed document." destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/ userinitiated=1 browsetime=2
08/06/2016 12:11:00	Notice	WebFilter	date=2016-06-08 time=12:10:59 logver=1 type=traffic level=notice sessionid=27501228 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename="This document appears to be empty. It may be a scanned image that needs OCR or it may be a malformed document." destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/ userinitiated=1 browsetime=14
08/06/2016 12:15:02	Notice	VPN	FortiSslvpn: 7132: Ras: connection to fortissl terminated
08/06/2016 12:15:02	Notice	VPN	date=2016-06-08 time=12:15:01 logver=1 type=traffic level=notice sessionid=27501228 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=sslvpn srcproduct=N/A srcip=172.30.1.1 srcport=N/A direction=outbound destinationip=212.95.237.92 remotename=N/A destinationport=10443 user=SArmstrong proto=6 rcvdbyte=8589934592 sentbyte=4294967296 utmaction=passthrough utmevent=vpn threat=disconnect vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service= url=N/A userinitiated=0 browsetime=N/A
08/06/2016 12:19:02	Error	VPN	FortiSslvpn: 9120: Ras : connection to fortissl failed : 0:0:
08/06/2016 12:19:28	Error	VPN	FortiSslvpn: 9444: Ras : connection to fortissl failed : 0:0:
08/06/2016 12:20:54	Error	VPN	FortiSslvpn: 10004: Ras : connection to fortissl failed : 0:0:
08/06/2016 12:30:29	Notice	WebFilter	date=2016-06-08 time=12:30:28 logver=1 type=traffic level=notice sessionid=27501228 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.google.co.uk destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/_/chrome/newtab?espv=2&ie=UTF-8 userinitiated=1 browsetime=75
08/06/2016 12:30:54	Error	VPN	FortiSslvpn: 9828: Ras : connection to fortissl failed : 0:0:
08/06/2016 12:32:02	Notice	FortiShield	id=96851 user=DBLOG_SOURCE_SYSTEM msg="FortiShield is enabled"
08/06/2016 12:32:02	Notice	VPN	id=96602 msg="SSLVPN service started successfully." vpntype=ssl
08/06/2016 12:33:27	Error	VPN	id=96603 msg="SSLVPN tunnel connection failed (Error=-455)." remotegw=212.95.237.92 vpnstate=connected vpntunnel="Swann VPN" vpntype=ssl vpnuser=SArmstrong
08/06/2016 12:33:40	Notice	VPN	date=2016-06-08 time=12:33:39 logver=1 type=traffic level=notice sessionid=27371560 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=sslvpn srcproduct=N/A srcip=N/A srcport=N/A direction=outbound destinationip=212.95.237.92 remotename=N/A destinationport=10443 user=N/A proto=6 rcvdbyte=1996804463 sentbyte=N/A utmaction=passthrough utmevent=vpn threat=connect vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service= url=N/A userinitiated=0 browsetime=N/A
08/06/2016 12:33:42	Notice	VPN	date=2016-06-08 time=12:33:41 logver=1 type=traffic level=notice sessionid=27371560 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=sslvpn srcproduct=N/A srcip=N/A srcport=N/A direction=outbound destinationip=212.95.237.92 remotename=N/A destinationport=10443 user=SArmstrong proto=6 rcvdbyte=4294967296 sentbyte=N/A utmaction=passthrough utmevent=vpn threat=disconnect vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service= url=N/A userinitiated=0 browsetime=N/A
08/06/2016 12:33:46	Notice	VPN	id=96600 msg="SSLVPN tunnel status" vpnstate=connected vpntunnel="Swann VPN" vpntype=ssl
08/06/2016 12:33:46	Notice	VPN	date=2016-06-08 time=12:33:45 logver=1 type=traffic level=notice sessionid=27371560 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=sslvpn srcproduct=N/A srcip=172.30.1.1 srcport=N/A direction=outbound destinationip=212.95.237.92 remotename=N/A destinationport=10443 user=SArmstrong proto=6 rcvdbyte=4294967459 sentbyte=1714 utmaction=passthrough utmevent=vpn threat=connect vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service= url=N/A userinitiated=0 browsetime=N/A
08/06/2016 12:36:00	Notice	WebFilter	date=2016-06-08 time=12:35:59 logver=1 type=traffic level=notice sessionid=27371560 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.google.co.uk destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/_/chrome/newtab?espv=2&ie=UTF-8 userinitiated=1 browsetime=16
08/06/2016 12:36:06	Notice	WebFilter	date=2016-06-08 time=12:36:05 logver=1 type=traffic level=notice sessionid=27371560 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.google.co.uk destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/webhp?sourceid=chrome-instant&ion=1&espv=2&ie=UTF-8 userinitiated=1 browsetime=5
08/06/2016 12:36:31	Notice	WebFilter	date=2016-06-08 time=12:36:30 logver=1 type=traffic level=notice sessionid=27371560 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.hiexpress.com destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/hotels/gb/en/braintree/wxfbt/hoteldetail?qAdlt=1&qBrs=6c.hi.ex.rs.ic.cp.in.sb.cw.cv.ul.vn&qChld=0&qFRA=1&qGRM=0&qPSt=0&qRRSrt=rt&qRef=df&qRms=1&qRpn=1&qRpp=20&qSHp=1&qSmP=3&qSrt=sBR&qWch=0&srb_u=1&icdv=99603195&siclientid=1936&sitrackingid=505641246&glat=SEAR&dp=true&icdv=99603195 userinitiated=1 browsetime=24
08/06/2016 12:37:28	Notice	WebFilter	date=2016-06-08 time=12:37:27 logver=1 type=traffic level=notice sessionid=27371560 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.hiexpress.com destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/holidayinnexpress/hotels/gb/en/reservation/book?qAdlt=1&qBrs=ic.cp.in.vn.hi.ex.rs.cv.sb.cw.ul.6c&qChld=0&qCiD=13&qCiMy=052016&qCoD=15&qCoMy=052016&qDest=Braintree%2C+United+Kingdom&qFRA=1&qGRM=0&qHtlC=wxfbt&qLat=51.877998&qLng=0.55312&qPSt=0&qRRSrt=rt&qRef=df&qRmP=3&qRms=1&qRpn=1&qRpp=12&qRtP=6CBARC&qSHp=1&qSlH=wxfbt&qSmP=3&qSrt=sDD&qWch=0&srb_u=1&method=redirect&modifySearch=bookhotel_wxfbt userinitiated=1 browsetime=57
08/06/2016 12:37:45	Notice	WebFilter	date=2016-06-08 time=12:37:44 logver=1 type=traffic level=notice sessionid=27371560 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.hiexpress.com destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/hotels/gb/en/reservation/book?method=guestandpaymentinfo&qAdlt=1&qBrs=ic.cp.in.vn.hi.ex.rs.cv.sb.cw.ul.6c&qChld=0&qCiD=13&qCiMy=052016&qCoD=15&qCoMy=052016&qDest=Braintree%2C+United+Kingdom&qFRA=1&qGRM=0&qHtlC=wxfbt&qLat=51.877998&qLng=0.55312&qPAm=0&qPSt=0&qPTy=0000&qRRSrt=rt&qRef=rr&qRmP=T.C.O.X.K&qRms=1&qRpn=1&qRpp=12&qRtP=6CBARC&qSHp=1&qSlH=wxfbt&qSlRc=OSNNIDME1&qSmP=3&qSrt=sDD&qWch=0&srb_u=1&pRmP=T.C.O.X.K userinitiated=1 browsetime=17
08/06/2016 12:39:39	Notice	WebFilter	date=2016-06-08 time=12:39:38 logver=1 type=traffic level=notice sessionid=27371560 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.hiexpress.com destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/hotels/gb/en/reservation/book?method=guestandpaymentinfo&qAdlt=1&qBrs=ic.cp.in.vn.hi.ex.rs.cv.sb.cw.ul.6c&qChld=0&qCiD=13&qCiMy=052016&qCoD=15&qCoMy=052016&qDest=Braintree%2C+United+Kingdom&qFRA=1&qGRM=0&qHtlC=wxfbt&qLat=51.877998&qLng=0.55312&qPAm=0&qPSt=0&qPTy=0000&qRRSrt=rt&qRef=rr&qRmP=T.C.O.X.K&qRms=1&qRpn=1&qRpp=12&qRtP=6CBARC&qSHp=1&qSlH=wxfbt&qSlRc=OSNNIDME1&qSmP=3&qSrt=sDD&qWch=0&srb_u=1&pRmP=T.C.O.X.K userinitiated=1 browsetime=69
08/06/2016 12:39:54	Notice	WebFilter	date=2016-06-08 time=12:39:53 logver=1 type=traffic level=notice sessionid=27371560 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.hiexpress.com destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/hotels/gb/en/reservation/reservationconfirmation?lastname=Armstorng&isLowestPricePromise=true&resnum=62407358 userinitiated=1 browsetime=16
08/06/2016 12:41:34	Notice	WebFilter	date=2016-06-08 time=12:41:33 logver=1 type=traffic level=notice sessionid=27371560 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=5 destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/41 userinitiated=1 browsetime=14
08/06/2016 12:43:17	Notice	WebFilter	date=2016-06-08 time=12:43:16 logver=1 type=traffic level=notice sessionid=27371560 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=1 destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/41 userinitiated=1 browsetime=63
08/06/2016 12:43:20	Notice	WebFilter	date=2016-06-08 time=12:43:19 logver=1 type=traffic level=notice sessionid=27371560 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=25 destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/41 userinitiated=1 browsetime=3
08/06/2016 12:45:02	Notice	WebFilter	date=2016-06-08 time=12:45:01 logver=1 type=traffic level=notice sessionid=27371560 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=25 destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/41 userinitiated=1 browsetime=2
08/06/2016 12:46:58	Notice	WebFilter	date=2016-06-08 time=12:46:57 logver=1 type=traffic level=notice sessionid=27371560 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=26 destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/41 userinitiated=1 browsetime=68
08/06/2016 12:47:35	Notice	WebFilter	date=2016-06-08 time=12:47:34 logver=1 type=traffic level=notice sessionid=27371560 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=6 destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/41 userinitiated=1 browsetime=30
08/06/2016 12:48:48	Notice	WebFilter	date=2016-06-08 time=12:48:47 logver=1 type=traffic level=notice sessionid=27371560 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename="This document appears to be empty. It may be a scanned image that needs OCR or it may be a malformed document." destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/ userinitiated=1 browsetime=52
08/06/2016 12:49:38	Notice	WebFilter	date=2016-06-08 time=12:49:37 logver=1 type=traffic level=notice sessionid=27371560 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename="This document appears to be empty. It may be a scanned image that needs OCR or it may be a malformed document." destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/ userinitiated=1 browsetime=26
08/06/2016 12:50:51	Notice	WebFilter	date=2016-06-08 time=12:50:50 logver=1 type=traffic level=notice sessionid=27371560 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename="This document appears to be empty. It may be a scanned image that needs OCR or it may be a malformed document." destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/ userinitiated=1 browsetime=32
08/06/2016 12:52:06	Notice	WebFilter	date=2016-06-08 time=12:52:05 logver=1 type=traffic level=notice sessionid=27371560 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename="This document appears to be empty. It may be a scanned image that needs OCR or it may be a malformed document." destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/ userinitiated=1 browsetime=39
08/06/2016 12:53:02	Notice	VPN	FortiSslvpn: 6652: Ras: connection to fortissl terminated
08/06/2016 12:53:04	Notice	VPN	date=2016-06-08 time=12:53:03 logver=1 type=traffic level=notice sessionid=27371560 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=sslvpn srcproduct=N/A srcip=172.30.1.1 srcport=N/A direction=outbound destinationip=212.95.237.92 remotename=N/A destinationport=10443 user=SArmstrong proto=6 rcvdbyte=8589934592 sentbyte=4294967296 utmaction=passthrough utmevent=vpn threat=disconnect vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service= url=N/A userinitiated=0 browsetime=N/A
08/06/2016 12:55:59	Notice	WebFilter	date=2016-06-08 time=12:55:58 logver=1 type=traffic level=notice sessionid=27371560 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename="This document appears to be empty. It may be a scanned image that needs OCR or it may be a malformed document." destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/ userinitiated=1 browsetime=181
08/06/2016 14:09:05	Notice	WebFilter	date=2016-06-08 time=14:09:04 logver=1 type=traffic level=notice sessionid=27371560 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.hiexpress.com destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/hotels/gb/en/reservation/reservationconfirmation?lastname=Armstorng&isLowestPricePromise=true&resnum=62407358 userinitiated=1 browsetime=28
08/06/2016 14:09:23	Error	VPN	FortiSslvpn: 5796: Ras : connection to fortissl failed : 0:0:
08/06/2016 14:10:04	Error	VPN	id=96603 msg="SSLVPN tunnel connection failed (Error=-455)." remotegw=212.95.237.92 vpnstate=connected vpntunnel="Swann VPN" vpntype=ssl vpnuser=SArmstrong
08/06/2016 14:10:32	Error	VPN	FortiSslvpn: 4484: Ras : connection to fortissl failed : 0:0:
08/06/2016 14:11:00	Notice	WebFilter	date=2016-06-08 time=14:10:59 logver=1 type=traffic level=notice sessionid=27371560 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.hiexpress.com destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/hotels/gb/en/reservation/reservationconfirmation?lastname=Armstorng&isLowestPricePromise=true&resnum=62407358 userinitiated=1 browsetime=19
08/06/2016 14:12:11	Notice	FortiShield	id=96851 user=DBLOG_SOURCE_SYSTEM msg="FortiShield is enabled"
08/06/2016 14:12:11	Notice	VPN	id=96602 msg="SSLVPN service started successfully." vpntype=ssl
08/06/2016 14:13:46	Notice	VPN	date=2016-06-08 time=14:13:45 logver=1 type=traffic level=notice sessionid=27371552 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=sslvpn srcproduct=N/A srcip=N/A srcport=N/A direction=outbound destinationip=212.95.237.92 remotename=N/A destinationport=10443 user=N/A proto=6 rcvdbyte=1985466735 sentbyte=N/A utmaction=passthrough utmevent=vpn threat=connect vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service= url=N/A userinitiated=0 browsetime=N/A
08/06/2016 14:13:47	Notice	VPN	date=2016-06-08 time=14:13:46 logver=1 type=traffic level=notice sessionid=27371552 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=sslvpn srcproduct=N/A srcip=N/A srcport=N/A direction=outbound destinationip=212.95.237.92 remotename=N/A destinationport=10443 user=SArmstrong proto=6 rcvdbyte=4294967296 sentbyte=N/A utmaction=passthrough utmevent=vpn threat=disconnect vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service= url=N/A userinitiated=0 browsetime=N/A
08/06/2016 14:13:52	Notice	VPN	date=2016-06-08 time=14:13:51 logver=1 type=traffic level=notice sessionid=27371552 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=sslvpn srcproduct=N/A srcip=172.30.1.5 srcport=N/A direction=outbound destinationip=212.95.237.92 remotename=N/A destinationport=10443 user=SArmstrong proto=6 rcvdbyte=4294967459 sentbyte=1528 utmaction=passthrough utmevent=vpn threat=connect vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service= url=N/A userinitiated=0 browsetime=N/A
08/06/2016 14:13:52	Notice	VPN	id=96600 msg="SSLVPN tunnel status" vpnstate=connected vpntunnel="Swann VPN" vpntype=ssl
08/06/2016 14:33:21	Notice	WebFilter	date=2016-06-08 time=14:33:20 logver=1 type=traffic level=notice sessionid=27371552 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.google.co.uk destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/webhp?sourceid=chrome-instant&ion=1&espv=2&ie=UTF-8 userinitiated=1 browsetime=214
08/06/2016 15:25:27	Notice	WebFilter	date=2016-06-08 time=15:25:26 logver=1 type=traffic level=notice sessionid=27371552 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename="This document appears to be empty. It may be a scanned image that needs OCR or it may be a malformed document." destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/ userinitiated=1 browsetime=17
08/06/2016 15:32:24	Notice	VPN	FortiSslvpn: 9052: Ras: connection to fortissl terminated
08/06/2016 15:32:27	Notice	VPN	date=2016-06-08 time=15:32:26 logver=1 type=traffic level=notice sessionid=27371552 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=sslvpn srcproduct=N/A srcip=172.30.1.5 srcport=N/A direction=outbound destinationip=212.95.237.92 remotename=N/A destinationport=10443 user=SArmstrong proto=6 rcvdbyte=8589934592 sentbyte=4294967296 utmaction=passthrough utmevent=vpn threat=disconnect vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service= url=N/A userinitiated=0 browsetime=N/A
08/06/2016 15:56:28	Notice	WebFilter	date=2016-06-08 time=15:56:27 logver=1 type=traffic level=notice sessionid=27371552 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=1 destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/1 userinitiated=1 browsetime=3
08/06/2016 17:09:42	Notice	VPN	date=2016-06-08 time=17:09:41 logver=1 type=traffic level=notice sessionid=27371552 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=sslvpn srcproduct=N/A srcip=172.30.1.1 srcport=N/A direction=outbound destinationip=212.95.237.92 remotename=N/A destinationport=10443 user=SArmstrong proto=6 rcvdbyte=12884902051 sentbyte=4294969052 utmaction=passthrough utmevent=vpn threat=connect vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service= url=N/A userinitiated=0 browsetime=N/A
08/06/2016 17:09:42	Notice	VPN	id=96600 msg="SSLVPN tunnel status" vpnstate=connected vpntunnel="Swann VPN" vpntype=ssl
08/06/2016 17:39:57	Notice	WebFilter	date=2016-06-08 time=17:39:56 logver=1 type=traffic level=notice sessionid=27371552 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=1 destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/1 userinitiated=1 browsetime=7
08/06/2016 17:42:59	Notice	VPN	FortiSslvpn: 5848: Ras: connection to fortissl terminated
08/06/2016 17:43:01	Notice	VPN	date=2016-06-08 time=17:43:00 logver=1 type=traffic level=notice sessionid=27371552 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=sslvpn srcproduct=N/A srcip=172.30.1.1 srcport=N/A direction=outbound destinationip=212.95.237.92 remotename=N/A destinationport=10443 user=SArmstrong proto=6 rcvdbyte=17179869184 sentbyte=8589934592 utmaction=passthrough utmevent=vpn threat=disconnect vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service= url=N/A userinitiated=0 browsetime=N/A
08/06/2016 19:00:36	Notice	WebFilter	date=2016-06-08 time=19:00:35 logver=1 type=traffic level=notice sessionid=27371552 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.google.co.uk destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/_/chrome/newtab?espv=2&ie=UTF-8 userinitiated=1 browsetime=6
08/06/2016 19:00:50	Notice	WebFilter	date=2016-06-08 time=19:00:49 logver=1 type=traffic level=notice sessionid=27371552 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.google.co.uk destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/webhp?sourceid=chrome-instant&ion=1&espv=2&ie=UTF-8 userinitiated=1 browsetime=13
08/06/2016 19:01:45	Notice	WebFilter	date=2016-06-08 time=19:01:44 logver=1 type=traffic level=notice sessionid=27371552 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.booking.com destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/searchresults.en-gb.html?aid=303948;label=kirkwall-kNbidNMuEY3nmI7ExGUi3wS103007194581%3Apl%3Ata%3Ap110%3Ap2%3Aac%3Aap1t1%3Aneg%3Afi%3Atiaud-146342138230%3Akwd-124805472%3Alp1007129%3Ali%3Adec%3Adm;sid=d67c0b8ab3a402cfd6816963e0e6b5d1;dcid=4;city=-2600430;hyb_red=1;redirected=1;redirected_from_city=1;source=city;src=city&gclid=CJuCiq6Bmc0CFa0V0wodouYBgg& userinitiated=1 browsetime=55
08/06/2016 19:02:20	Notice	WebFilter	date=2016-06-08 time=19:02:19 logver=1 type=traffic level=notice sessionid=27371552 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.booking.com destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/searchresults.en-gb.html?aid=303948&dcid=4&label=kirkwall-kNbidNMuEY3nmI7ExGUi3wS103007194581%3Apl%3Ata%3Ap110%3Ap2%3Aac%3Aap1t1%3Aneg%3Afi%3Atiaud-146342138230%3Akwd-124805472%3Alp1007129%3Ali%3Adec%3Adm&sid=d67c0b8ab3a402cfd6816963e0e6b5d1&sb=1&src=searchresults&src_elem=sb&error_url=http%3A%2F%2Fwww.booking.com%2Fsearchresults.en-gb.html%3Faid%3D303948%3Blabel%3Dkirkwall-kNbidNMuEY3nmI7ExGUi3wS103007194581%253Apl%253Ata%253Ap110%253Ap2%253Aac%253Aap1t1%253Aneg%253Afi%253Atiaud-146342138230%253Akwd-12480 userinitiated=1 browsetime=34
08/06/2016 19:02:43	Notice	WebFilter	date=2016-06-08 time=19:02:42 logver=1 type=traffic level=notice sessionid=27371552 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.booking.com destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/searchresults.en-gb.html?aid=303948;label=kirkwall-kNbidNMuEY3nmI7ExGUi3wS103007194581%3Apl%3Ata%3Ap110%3Ap2%3Aac%3Aap1t1%3Aneg%3Afi%3Atiaud-146342138230%3Akwd-124805472%3Alp1007129%3Ali%3Adec%3Adm;sid=d67c0b8ab3a402cfd6816963e0e6b5d1;dcid=4;city=-2600430;hyb_red=1;redirected=1;redirected_from_city=1;source=city;src=city&gclid=CJuCiq6Bmc0CFa0V0wodouYBgg& userinitiated=1 browsetime=22
08/06/2016 19:03:21	Notice	WebFilter	date=2016-06-08 time=19:03:20 logver=1 type=traffic level=notice sessionid=27371552 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.booking.com destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/searchresults.en-gb.html?aid=303948&dcid=4&label=kirkwall-kNbidNMuEY3nmI7ExGUi3wS103007194581%3Apl%3Ata%3Ap110%3Ap2%3Aac%3Aap1t1%3Aneg%3Afi%3Atiaud-146342138230%3Akwd-124805472%3Alp1007129%3Ali%3Adec%3Adm&sid=d67c0b8ab3a402cfd6816963e0e6b5d1&sb=1&src=searchresults&src_elem=sb&error_url=http%3A%2F%2Fwww.booking.com%2Fsearchresults.en-gb.html%3Faid%3D303948%3Blabel%3Dkirkwall-kNbidNMuEY3nmI7ExGUi3wS103007194581%253Apl%253Ata%253Ap110%253Ap2%253Aac%253Aap1t1%253Aneg%253Afi%253Atiaud-146342138230%253Akwd-12480 userinitiated=1 browsetime=39
08/06/2016 19:04:33	Notice	WebFilter	date=2016-06-08 time=19:04:32 logver=1 type=traffic level=notice sessionid=27371552 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.booking.com destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/searchresults.en-gb.html?aid=303948&dcid=4&label=kirkwall-kNbidNMuEY3nmI7ExGUi3wS103007194581%3Apl%3Ata%3Ap110%3Ap2%3Aac%3Aap1t1%3Aneg%3Afi%3Atiaud-146342138230%3Akwd-124805472%3Alp1007129%3Ali%3Adec%3Adm&sid=d67c0b8ab3a402cfd6816963e0e6b5d1&sb=1&src=searchresults&src_elem=sb&error_url=http%3A%2F%2Fwww.booking.com%2Fsearchresults.en-gb.html%3Faid%3D303948%3Blabel%3Dkirkwall-kNbidNMuEY3nmI7ExGUi3wS103007194581%253Apl%253Ata%253Ap110%253Ap2%253Aac%253Aap1t1%253Aneg%253Afi%253Atiaud-146342138230%253Akwd-12480 userinitiated=1 browsetime=8
08/06/2016 19:05:07	Notice	WebFilter	date=2016-06-08 time=19:05:06 logver=1 type=traffic level=notice sessionid=27371552 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.edreams.co.uk destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/flights/airline/BE/flybe/?mktportal=google&price=47&gclid=CL26i5mCmc0CFY8y0wod_QQKTA userinitiated=1 browsetime=33
08/06/2016 19:05:22	Notice	WebFilter	date=2016-06-08 time=19:05:21 logver=1 type=traffic level=notice sessionid=27371552 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.edreams.co.uk destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/travel/?mktportal=google#/results/type=R;buyPath=24;from.id=1009188;to.id=1013726;dep=2016-06-27;ret=2016-07-01;adults=1;children=0;infants=0 userinitiated=1 browsetime=16
08/06/2016 19:15:30	Notice	WebFilter	date=2016-06-08 time=19:15:29 logver=1 type=traffic level=notice sessionid=27371552 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=N/A srcproduct=N/A srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.edreams.co.uk destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/travel/?mktportal=google#/results/type=R;buyPath=24;from.id=1009188;to.id=1013726;dep=2016-06-27;ret=2016-07-01;adults=1;children=0;infants=0 userinitiated=1 browsetime=0
09/06/2016 09:18:37	Notice	FortiShield	id=96851 user=DBLOG_SOURCE_SYSTEM msg="FortiShield is enabled"
09/06/2016 09:18:37	Notice	VPN	id=96602 msg="SSLVPN service started successfully." vpntype=ssl
09/06/2016 10:11:36	Notice	WebFilter	date=2016-06-09 time=10:11:35 logver=1 type=traffic level=notice sessionid=27763688 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=iexplore.exe srcproduct="Internet Explorer" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=focalpoint.swanngroupltd.com destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/FocalPoint/Logon/Logon.aspx?ReturnUrl=%2fFocalPoint%2fInbox%2fInbox.aspx userinitiated=1 browsetime=6
09/06/2016 10:12:13	Notice	WebFilter	date=2016-06-09 time=10:12:12 logver=1 type=traffic level=notice sessionid=27763688 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=iexplore.exe srcproduct="Internet Explorer" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=focalpoint.swanngroupltd.com destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/FocalPoint/Inbox/Inbox.aspx userinitiated=1 browsetime=37
09/06/2016 10:14:15	Notice	WebFilter	date=2016-06-09 time=10:14:14 logver=1 type=traffic level=notice sessionid=27763688 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=iexplore.exe srcproduct="Internet Explorer" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=focalpoint.swanngroupltd.com destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/FocalPoint/Inbox/Inbox.aspx userinitiated=1 browsetime=21
09/06/2016 10:14:27	Notice	WebFilter	date=2016-06-09 time=10:14:26 logver=1 type=traffic level=notice sessionid=27763688 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=iexplore.exe srcproduct="Internet Explorer" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=focalpoint.swanngroupltd.com destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/FocalPoint/Enquiries/ProjectEnquiryView.aspx?Source=ProjectManagement userinitiated=1 browsetime=12
09/06/2016 10:14:27	Notice	WebFilter	date=2016-06-09 time=10:14:27 logver=1 type=traffic level=notice sessionid=27763688 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=iexplore.exe srcproduct="Internet Explorer" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=focalpoint.swanngroupltd.com destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/FocalPoint/Enquiries/ProjectEnquiryView.aspx?Source=ProjectManagement userinitiated=1 browsetime=1
09/06/2016 10:15:22	Notice	WebFilter	date=2016-06-09 time=10:15:21 logver=1 type=traffic level=notice sessionid=27763688 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=iexplore.exe srcproduct="Internet Explorer" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=focalpoint.swanngroupltd.com destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/FocalPoint/Enquiries/ProjectEnquiryView.aspx?Source=ProjectManagement userinitiated=1 browsetime=53
09/06/2016 10:16:17	Notice	WebFilter	date=2016-06-09 time=10:16:16 logver=1 type=traffic level=notice sessionid=27763688 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=iexplore.exe srcproduct="Internet Explorer" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=focalpoint.swanngroupltd.com destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/FocalPoint/Enquiries/ProjectEnquiryView.aspx?Source=ProjectManagement userinitiated=1 browsetime=2
09/06/2016 10:18:46	Notice	WebFilter	date=2016-06-09 time=10:18:45 logver=1 type=traffic level=notice sessionid=27763688 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.google.co.uk destinationport=443 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=https url=/search?q=petitjean+lighting+columns&oq=petitjean&aqs=chrome.2.69i60j69i57j69i59j0l3.7076j0j7&sourceid=chrome&ie=UTF-8 userinitiated=1 browsetime=24
09/06/2016 10:18:53	Notice	WebFilter	date=2016-06-09 time=10:18:52 logver=1 type=traffic level=notice sessionid=27763688 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.petitjean.fr destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/index.php/en/skills-products/9-fonctionnal-range userinitiated=1 browsetime=7
09/06/2016 10:19:23	Notice	WebFilter	date=2016-06-09 time=10:19:22 logver=1 type=traffic level=notice sessionid=27763688 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.petitjean.fr destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/index.php/en/contact-eng userinitiated=1 browsetime=30
09/06/2016 10:39:49	Notice	WebFilter	date=2016-06-09 time=10:39:48 logver=1 type=traffic level=notice sessionid=27763688 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=1 destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/1 userinitiated=1 browsetime=4
09/06/2016 10:40:52	Notice	WebFilter	date=2016-06-09 time=10:40:51 logver=1 type=traffic level=notice sessionid=27763688 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=1 destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/1 userinitiated=1 browsetime=2
09/06/2016 10:42:43	Notice	WebFilter	date=2016-06-09 time=10:42:42 logver=1 type=traffic level=notice sessionid=27763688 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=1 destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/1 userinitiated=1 browsetime=2
09/06/2016 12:52:36	Notice	WebFilter	date=2016-06-09 time=12:52:35 logver=1 type=traffic level=notice sessionid=27763688 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename="This document appears to be empty. It may be a scanned image that needs OCR or it may be a malformed document." destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/ userinitiated=1 browsetime=8
09/06/2016 13:02:58	Notice	WebFilter	date=2016-06-09 time=13:02:57 logver=1 type=traffic level=notice sessionid=27763688 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename="This document appears to be empty. It may be a scanned image that needs OCR or it may be a malformed document." destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/ userinitiated=1 browsetime=11
09/06/2016 13:29:53	Notice	WebFilter	date=2016-06-09 time=13:29:52 logver=1 type=traffic level=notice sessionid=27763688 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename="This document appears to be empty. It may be a scanned image that needs OCR or it may be a malformed document." destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/ userinitiated=1 browsetime=63
09/06/2016 13:32:19	Notice	WebFilter	date=2016-06-09 time=13:32:18 logver=1 type=traffic level=notice sessionid=27763688 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=Acrobat.exe srcproduct="Adobe Acrobat DC" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename="This document appears to be empty. It may be a scanned image that needs OCR or it may be a malformed document." destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/ userinitiated=1 browsetime=146
09/06/2016 13:48:58	Notice	WebFilter	date=2016-06-09 time=13:48:57 logver=1 type=traffic level=notice sessionid=27763688 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=www.petitjean.fr destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/index.php/en/contact-eng userinitiated=1 browsetime=5
09/06/2016 13:49:04	Notice	WebFilter	date=2016-06-09 time=13:49:03 logver=1 type=traffic level=notice sessionid=27763688 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=tsbluebook.steel-sci.org destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/EN/Browsers/Main.htm userinitiated=1 browsetime=6
09/06/2016 13:53:27	Notice	WebFilter	date=2016-06-09 time=13:53:26 logver=1 type=traffic level=notice sessionid=27763688 hostname=SEG-SA010416L uid=A5187AE816A94F879C27AC0BEB33A583 devid=FCT8002273666622 fgtserial=N/A regip=N/A srcname=chrome.exe srcproduct="Google Chrome" srcip=N/A srcport=N/A direction=outbound destinationip=N/A remotename=tsbluebook.steel-sci.org destinationport=80 user=Stephen.Armstrong@SOUTHAMPTON1.SWANNGROUP.LOCAL proto=6 rcvdbyte=N/A sentbyte=N/A utmaction=userbrowsed utmevent=webfilter threat=N/A vd=N/A fctver=5.4.0.0780 os="Microsoft Windows 10 Professional Edition, 64-bit (build 10586)" usingpolicy="" service=http url=/EN/Browsers/Cnt.htm userinitiated=1 browsetime=262