ISA Server Bandwidth question

[nick heppinstall]

Anyone have any ideas about this. I've been looking at the sites that have used the maximum bandwidth this month and maplins is at the top. We're a company using over 500 machines and for the life of me I cant understand why maplins would be at the top. Their may be a couple of people who would look at the site but not to this extent. Any ideas ?

[Plotloss]

Do the logs not give any indication of which machine/resource that made up the bulk of these bandwidth requests?

[JamieBeeston]

Either someone has configured the logging wrong, in that you're looking at someone elses logs, or, more likely, some industrious kiddy has uploaded some 'sexual / copyright unfriendly' content to that site to distribute to their chums.

Logs are the only answer..

Are the logs a one off this week/month?

you could check the contents of their home folder, tho anyone with half a brain will have whitespaced the folder names to make them harder to detect.

Any young kiddies working for you ? or any security intrusions of recent? had to be one or the other really.

Let us know if you get any more details.

J

[jon h]

If detailed monitoring and control of web activity becomes necessary, may I suggest you take a look at SurfControl. This bolts onto ISA Server and allows total control of web usage. I was surprised what people were up to when we first installed it, monitoring only and not controlling access. It has all stopped now!

Jon H