If you are using the HTTP-Proxy filter for outbound traffic on your firewall you can turn on logging and check the "Send to Reports" box. Then you can use Watchguard's Report server to tell you exactly which hosts are generating what traffic and the volume. The Report Server software comes with the Watchguard Firebox.
Just realized that I am assuming you have a firebox since you posted in the Watchguard category...