Well, i’ve googled and searched at the forums, but didn´t find a clear answer.
I have a Windows XP Home 32-bit and installed CIS 5.0.163652.1142. All good. But i’ve noticed that cmdagent.exe constantly start to download and/or upload something fom 204.93.142.142:80.
It also performs ‘cloud’ look-ups, which can be found under Defense+\Defense+ Settings\Execution Control Settings. This will happen If the two boxes are checked, even if D+ is disabled.
If the traffic is for cloud look up it should communicate on ports TCP 4448 UDP 4447. At what port are you seeing the traffic Allan? Port 80 or the Cloud look up ports?