SBS 2008 64 Bit causing excessive Internet traffic
|
From: mecerrato on 12 Apr 2010 09:59 I have a Windows 2008 small business server 64 bit edition which comes bundled with exchange server 2007 64 bit. Everything is working fine as far as resources, shares, AD, and Exchange. The problem is that the server is causing a lot of internet activity and is slowing internet access for everyone on the network (5 users) what could be causing the activity? I have a 6gb adsl cap which is just being chewed up by the server. I know it is the server because while the internet activity light is going crazy on my dsl router I have systematically unplugged each PC to see if the traffic stops. After disconnecting each PC the traffic was still there, once in unplugged the server 2008 from the netowrok the activity ceases immediatly. I have a hardware firewall and my router is using NAT with most ports closed except for the necessary ones (25, 110, etc...). I only have 5 to 7 users at any one time, not sure what to check for - please help Here is what i have already done: checked for virsuses, installed all updates and checked exchange queues Here is what I am running on the server: exchange 2007, symantec endpoint antivirus client, ORF spam filter (by VAMSOFT), DNS server, DHCP server
From: Kerry Brown on 12 Apr 2010 10:18 What do the firewall logs on the router say? What IP address is the server connecting to? -- Kerry Brown MS-MVP - Windows Desktop Experience: Systems Administration http://www.vistahelp.ca/phpBB2/ "mecerrato" <mecerrato(a)discussions.microsoft.com> wrote in message news:1003C547-0A62-4845-9024-4F05D94FCC29(a)microsoft.com... > I have a Windows 2008 small business server 64 bit edition which comes > bundled with exchange server 2007 64 bit. Everything is working fine as > far > as resources, shares, AD, and Exchange. The problem is that the server is > causing a lot of internet activity and is slowing internet access for > everyone on the network (5 users) what could be causing the activity? I > have > a 6gb adsl cap which is just being chewed up by the server. I know it is > the > server because while the internet activity light is going crazy on my dsl > router I have systematically unplugged each PC to see if the traffic > stops. > After disconnecting each PC the traffic was still there, once in unplugged > the server 2008 from the netowrok the activity ceases immediatly. I have > a > hardware firewall and my router is using NAT with most ports closed except > for the necessary ones (25, 110, etc...). I only have 5 to 7 users at any > one time, not sure what to check for - please help > > Here is what i have already done: checked for virsuses, installed all > updates and checked exchange queues > > Here is what I am running on the server: exchange 2007, symantec endpoint > antivirus client, ORF spam filter (by VAMSOFT), DNS server, DHCP server >
From: Leythos on 12 Apr 2010 10:18 In article <1003C547-0A62-4845-9024-4F05D94FCC29(a)microsoft.com>, mecerrato(a)discussions.microsoft.com says... > > I have a Windows 2008 small business server 64 bit edition which comes > bundled with exchange server 2007 64 bit. Everything is working fine as far > as resources, shares, AD, and Exchange. The problem is that the server is > causing a lot of internet activity and is slowing internet access for > everyone on the network (5 users) what could be causing the activity? I have > a 6gb adsl cap which is just being chewed up by the server. I know it is the > server because while the internet activity light is going crazy on my dsl > router I have systematically unplugged each PC to see if the traffic stops. > After disconnecting each PC the traffic was still there, once in unplugged > the server 2008 from the netowrok the activity ceases immediatly. I have a > hardware firewall and my router is using NAT with most ports closed except > for the necessary ones (25, 110, etc...). I only have 5 to 7 users at any > one time, not sure what to check for - please help > > Here is what i have already done: checked for virsuses, installed all > updates and checked exchange queues > > Here is what I am running on the server: exchange 2007, symantec endpoint > antivirus client, ORF spam filter (by VAMSOFT), DNS server, DHCP server 6GB is nothing, you should get a better service. Have you considered Windows Updates, Antivirus Updates, DNS queries, WSUS updates, etc...? I can do 6GB in a single day, from just one workstation. -- You can't trust your best friends, your five senses, only the little voice inside you that most civilians don't even hear -- Listen to that. Trust yourself. spam999free(a)rrohio.com (remove 999 for proper email address)
From: Boon Tee [SBS-MVP] on 12 Apr 2010 10:55 Did you also install Forefront when it was presented in the installation? -- Regards, Boon "mecerrato" <mecerrato(a)discussions.microsoft.com> wrote in message news:1003C547-0A62-4845-9024-4F05D94FCC29(a)microsoft.com... > I have a Windows 2008 small business server 64 bit edition which comes > bundled with exchange server 2007 64 bit. Everything is working fine as > far > as resources, shares, AD, and Exchange. The problem is that the server is > causing a lot of internet activity and is slowing internet access for > everyone on the network (5 users) what could be causing the activity? I > have > a 6gb adsl cap which is just being chewed up by the server. I know it is > the > server because while the internet activity light is going crazy on my dsl > router I have systematically unplugged each PC to see if the traffic > stops. > After disconnecting each PC the traffic was still there, once in unplugged > the server 2008 from the netowrok the activity ceases immediatly. I have > a > hardware firewall and my router is using NAT with most ports closed except > for the necessary ones (25, 110, etc...). I only have 5 to 7 users at any > one time, not sure what to check for - please help > > Here is what i have already done: checked for virsuses, installed all > updates and checked exchange queues > > Here is what I am running on the server: exchange 2007, symantec endpoint > antivirus client, ORF spam filter (by VAMSOFT), DNS server, DHCP server >
From: Chris Puckett [MSFT] on 12 Apr 2010 10:59
If you installed Forefront Security for Exchange, see if it is the reason. It is configured to download updates for each of the scan engines once an hour every day. You can temporarily disable or modify that schedule in the Task Scheduler to see if the usage decreases. You can also view the C:\Program Files (x86)\Microsoft Forefront Security\Exchange Server\Data\ProgramLog.txt to see how often it's downloading and if the times line up with the bandwidth usage. -- Chris Puckett This posting is provided "AS IS" with no warranties, and confers no rights. "mecerrato" <mecerrato(a)discussions.microsoft.com> wrote in message news:1003C547-0A62-4845-9024-4F05D94FCC29(a)microsoft.com... > I have a Windows 2008 small business server 64 bit edition which comes > bundled with exchange server 2007 64 bit. Everything is working fine as > far > as resources, shares, AD, and Exchange. The problem is that the server is > causing a lot of internet activity and is slowing internet access for > everyone on the network (5 users) what could be causing the activity? I > have > a 6gb adsl cap which is just being chewed up by the server. I know it is > the > server because while the internet activity light is going crazy on my dsl > router I have systematically unplugged each PC to see if the traffic > stops. > After disconnecting each PC the traffic was still there, once in unplugged > the server 2008 from the netowrok the activity ceases immediatly. I have > a > hardware firewall and my router is using NAT with most ports closed except > for the necessary ones (25, 110, etc...). I only have 5 to 7 users at any > one time, not sure what to check for - please help > > Here is what i have already done: checked for virsuses, installed all > updates and checked exchange queues > > Here is what I am running on the server: exchange 2007, symantec endpoint > antivirus client, ORF spam filter (by VAMSOFT), DNS server, DHCP server > |