Daisy chain traffic leak or VLAN hop

[jaltmann]

We are experiencing a strange issue where we've had a Polycom VVX 311 phone reaching out to websites that an end user has navigated to on their PC.  Our PC's are daisy chained to the phones and we operate on Cisco switch with regular access VLANs and voice VLANs.  In our firewall logs we see an end user with an workstation VLAN origin IP reaching out to a website, then later in the firewall logs (over the course of a few days) we see random connections from the Polycom device IP (on the voice VLAN) reaching out to the same website on port 80 followed by port 443.

Our users do not use the BToE application.

[SteffenBaierUK]

Hello @jaltmann ,

welcome to the Polycom Community.

Both the community's Must Read First and the community's FAQ reference the basic minimum information a new or follow up post should contain.

This ensures the questions having to be asked are limited and any new or follow up post contains the right amount of details to ensure any voluntary participant within the community does not spend additional time chasing basic information.

As a reminder the basic information asked for:

• Provide the exact Software Version of your Phone
• Provide the Phone Model
• Provide the Call Platform (aka openSIP,Skype for Business Online, Skype for Business on Premise, Lync)
• Additional Polycom Infrastructure (RPRM,PDMS or BToE)
• If applicable provide a backup of the phone in question

UC Software 4.0.0 or later via the Web Interface Utilities > Phone Backup & Restore > Phone Backup > Phone Backup. Please rename into .TXT or Zip the file to attach.
Since UC Software 5.9.0 simply provide this via the Web Interface Diagnostics > Download Support Information Package

• If possible provide a Log and either attach them or use the Code Tag.Consult the Troubleshooting Section found within the FAQ if applicable
• If possible provide the MAC Address or Serial of the device
• Provide details for example if the issue is a day 1 issue or only happened after an upgrade or any other relevant details
• For questions around Support please check here

Whilst providing some of these details may not directly impact any possible answer the community can provide, it does enable Polycom to have an overview of the current software used. In addition providing all details at the same time allow us to check logs or look up a potential support partners if an issue needs to come into support. It also enables us to verify the entitlement for using features.

Please ensure you always check the FAQ's and/or utilize the community search before posting any new topics or follow up post’s.

Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier