From: Russ SBITS.Biz [SBS-MVP] on
I think Chris and Boon
hit the nail on the head.
My 2 cents
(Forefront)
Russ

--
Russell Grover - SBITS.Biz [SBS-MVP]
MCP, MCPS, MCNPS, SBSC
Small Business Server/Computer Support - www.SBITS.Biz
Question or Second Opinion - www.PersonalITConsultant.com
BPOS - Microsoft Online Services - www.Microsoft-Online-Services.com
http://www.twitter.com/SBITSdotBiz

"Chris Puckett [MSFT]" <chris.puckett(a)online.microsoft.com> wrote in message
news:OeoGNDl2KHA.1388(a)TK2MSFTNGP02.phx.gbl...
> If you installed Forefront Security for Exchange, see if it is the reason.
>
> It is configured to download updates for each of the scan engines once an
> hour every day. You can temporarily disable or modify that schedule in
> the Task Scheduler to see if the usage decreases.
>
> You can also view the C:\Program Files (x86)\Microsoft Forefront
> Security\Exchange Server\Data\ProgramLog.txt to see how often it's
> downloading and if the times line up with the bandwidth usage.
>
> --
> Chris Puckett
>
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
>
>
> "mecerrato" <mecerrato(a)discussions.microsoft.com> wrote in message
> news:1003C547-0A62-4845-9024-4F05D94FCC29(a)microsoft.com...
>> I have a Windows 2008 small business server 64 bit edition which comes
>> bundled with exchange server 2007 64 bit. Everything is working fine as
>> far
>> as resources, shares, AD, and Exchange. The problem is that the server
>> is
>> causing a lot of internet activity and is slowing internet access for
>> everyone on the network (5 users) what could be causing the activity? I
>> have
>> a 6gb adsl cap which is just being chewed up by the server. I know it is
>> the
>> server because while the internet activity light is going crazy on my dsl
>> router I have systematically unplugged each PC to see if the traffic
>> stops.
>> After disconnecting each PC the traffic was still there, once in
>> unplugged
>> the server 2008 from the netowrok the activity ceases immediatly. I have
>> a
>> hardware firewall and my router is using NAT with most ports closed
>> except
>> for the necessary ones (25, 110, etc...). I only have 5 to 7 users at
>> any
>> one time, not sure what to check for - please help
>>
>> Here is what i have already done: checked for virsuses, installed all
>> updates and checked exchange queues
>>
>> Here is what I am running on the server: exchange 2007, symantec endpoint
>> antivirus client, ORF spam filter (by VAMSOFT), DNS server, DHCP server
>>