Re: ISA Server Report - "Traffic By Users - Bytes Out" > External?
- From: "Mike Webb" <Mike_Webb@xxxxxxxxxxxxxxxxx>
- Date: Thu, 2 Nov 2006 12:37:31 -0600
I have 13 clients, and it climbs to 15-20 during our research periods when
the scientists and students come in with their laptops.
From what I see from just the webpages, it's darn hard to choose between theSymantec and GFI products. Both look quite good.
Mike
"Steve" <newsgroup@xxxxxxxxxx> wrote in message
news:OIAzpyq$GHA.3308@xxxxxxxxxxxxxxxxxxxxxxx
How many users do you have? For my existing SBS clients I actually use the
SAV Enterprise which includes both the Exchange product and the client
product but I believe its only available that way with a minimum of 10
licenses. For new clients I'll seriously consider GFI Mail Security as I
already use their Mail Essentials 12 for catching spam (better than the
built-in IMF). Many people recommend the Trend SBS products.
"Mike Webb" <Mike_Webb@xxxxxxxxxxxxxxxxx> wrote in message
news:uL%23Fqrq$GHA.3836@xxxxxxxxxxxxxxxxxxxxxxx
I checked out GFI's Mail Security for Exchange/SMTP - looks good. Also
went to Symantec.com and looked at Mail Security for SMTP for Small
Business and Mail Security for Windows Small Business Server. Both
Symantec products also look good, but can't tell for sure which to get. I
assume (there's that word again) I should get the one that says it's for
SBS. (I've been bit so much by assuming things with SBS or Microsoft that
I'm gun-shy.)
Has anyone experience with the GFI product and the Symantec product for
SBS, and willing to share a recommendation?
Mike
"Steve" <newsgroup@xxxxxxxxxx> wrote in message
news:O6p9DSq$GHA.4060@xxxxxxxxxxxxxxxxxxxxxxx
Wow you're running practically naked. Since you're already have Symantec
you may want to add Symantec Mail Security for Microsoft Exchange 5.0
designed to scan the IS store especially as messages flow into it.
Another alternative is the GFI Mail Security product.
"Mike Webb" <Mike_Webb@xxxxxxxxxxxxxxxxx> wrote in message
news:%23P5lKGq$GHA.4024@xxxxxxxxxxxxxxxxxxxxxxx
I don't have an "Exchange Aware" AV program. The AV version I ahve has
a tab labeled Exchange, so I assumed (bad word, I know) that it was
scanning Exchange. Guess I was wrong.
Mike
"Joel31622" <Batista@xxxxxxxxxxx> wrote in message
news:%23ujXq$p$GHA.996@xxxxxxxxxxxxxxxxxxxxxxx
Hi Mike, in your post you said that you were using Symantec Antivirus
to scan your PC/Server. Do you also have an "Exchange-Aware"
anti-virus program to scan your Exchange database, such as "Symantec
Mail Security for MS Exchange"? (Not to be confused with an
"Outlook-Aware" AV program)
Since you can't seem to find anything on the Server/Workstations, is
it possible you have some kind of malware/virus in your Exchange
database?
Mike Webb wrote:
Running SBS 2003 Premium, Exchange, ISA 2004, WSUS, 2 NICs and a
router, dynamic IP from ISP, DDNS service from dyndns.org, downloaded
and am using GFI Web Monitor 30-day evaluation as of 1 Nov.
=======================
Noticed a week ago that our uploads through the ISP have spiked; had
been 10-40 MB/day, and now is up to 2 GB or more per day. Can't
figure out why, but I'm working on it. I downloaded GYI Web Monitor
to help me track individual users. It is a bit better than ISA
reports for that. Today I checked GFI and didn't see anything
remarkable, then ran a ISA report for yesterday and saw we had 242 MB
sent (Bytes Out) on the Traffic By User section of the report. And
our Executive Director had the most - 196 MB. When I asked him about
it, he said he only sent 2 emails - and showed them to me. Should
have been just a few KBs. So, I now think we've been highjacked.
Asked him to run a full scan with his AV (Symantec Corporate Ed.),
and a full scan with his SPAM app.
I'm really not sure what I should do to try and identify the problem.
I know about NETMON, but not how to interpret the results. I'm also
worried about our security. I've got a good password policy
in-place, am running Symantec Corporate Ed. AV on the server and
feeding to the clients on each workstation. It runs (on the server)
once per week. (last scan was at 5:30 am on the 29th - am running a
full scan now.) Also have Windows Defender running on the server once
per day.
Any advice??
.
- References:
- ISA Server Report - "Traffic By Users - Bytes Out" > External?
- From: Mike Webb
- Re: ISA Server Report - "Traffic By Users - Bytes Out" > External?
- From: Joel31622
- Re: ISA Server Report - "Traffic By Users - Bytes Out" > External?
- From: Mike Webb
- Re: ISA Server Report - "Traffic By Users - Bytes Out" > External?
- From: Steve
- Re: ISA Server Report - "Traffic By Users - Bytes Out" > External?
- From: Mike Webb
- Re: ISA Server Report - "Traffic By Users - Bytes Out" > External?
- From: Steve
- ISA Server Report - "Traffic By Users - Bytes Out" > External?
- Prev by Date: WMPhone 5 not synchorizing deleted mail with Exchange
- Next by Date: Re: Can't delete message in non-cached mode
- Previous by thread: Re: ISA Server Report - "Traffic By Users - Bytes Out" > External?
- Next by thread: Re: ISA Server Report - "Traffic By Users - Bytes Out" > External?
- Index(es):
Relevant Pages
|
Loading