I installed a Cisco 837 router on a server running SBS2000 with ISA and SQL
installed and configured with the default settings

After leaving the site Friday with everything apparently working OK I was
contacted by the ISP to warn of excessive use over the weekend. 14,000 MB
over the weekend on a site whose normal usage is 600 MB per month. It seems
only about 20MB was inward with the balance going out. How do I turn on
logging so I can track what is happening?

I must confess to not locking down the router securely believing
(misguidedly?) that ISA would keep the site secure.

I noticed the SQL icon on the server that was winking and showing a red
knick on it I had not seen before. Is this related to anything?

The server and all clients have been checked today for viruses with Symantec
Corporate with up to date definitions and nothing has shown up.

The problem is not there when running on the old Nokia router which I have
put back in place until I find out what is wrong with the Cisco
configuration (if that is the problem).

Has anyone any thoughts on what is going on? Any help would be much
appreciated.

Paul

Re: Excessive internet usage after installing Cisco 837 router by CRIS

CRIS
Mon Aug 09 11:50:14 CDT 2004

Well if the problem is present when CISCO is there and not when the old
router is in place, then obviously the problem is in the CISCO router
config. It must be broadcasting something or the other remote possibility
is that one of the workstations has spyware which is broadcasting but the
old router has that port blocked?

--
Cris Hanna (SBS-MVP)
_____________________
Please only respond in the Newsgroup and not directly to me, so that
everyone can share the information
"Paul Burrows" <paul.burrows@nospam.co.nz> wrote in message
news:uUZM9KcfEHA.1764@TK2MSFTNGP10.phx.gbl...
> I installed a Cisco 837 router on a server running SBS2000 with ISA and
SQL
> installed and configured with the default settings
>
> After leaving the site Friday with everything apparently working OK I was
> contacted by the ISP to warn of excessive use over the weekend. 14,000 MB
> over the weekend on a site whose normal usage is 600 MB per month. It
seems
> only about 20MB was inward with the balance going out. How do I turn on
> logging so I can track what is happening?
>
> I must confess to not locking down the router securely believing
> (misguidedly?) that ISA would keep the site secure.
>
> I noticed the SQL icon on the server that was winking and showing a red
> knick on it I had not seen before. Is this related to anything?
>
> The server and all clients have been checked today for viruses with
Symantec
> Corporate with up to date definitions and nothing has shown up.
>
> The problem is not there when running on the old Nokia router which I have
> put back in place until I find out what is wrong with the Cisco
> configuration (if that is the problem).
>
> Has anyone any thoughts on what is going on? Any help would be much
> appreciated.
>
> Paul
>
>



Re: Excessive internet usage after installing Cisco 837 router by Paul

Paul
Mon Aug 09 17:37:02 CDT 2004

When you say router configuration, do you mean I simply haven't blocked the
required ports or do you mean that something deep in the configuration is
wrong and the router itself is broadcasting data?



"CRIS HANNA (SBS-MVP)" <crishannanospam@computingpossibilities.net> wrote in
message news:uCoU9CjfEHA.3476@tk2msftngp13.phx.gbl...
> Well if the problem is present when CISCO is there and not when the old
> router is in place, then obviously the problem is in the CISCO router
> config. It must be broadcasting something or the other remote
possibility
> is that one of the workstations has spyware which is broadcasting but the
> old router has that port blocked?
>
> --
> Cris Hanna (SBS-MVP)
> _____________________
> Please only respond in the Newsgroup and not directly to me, so that
> everyone can share the information
> "Paul Burrows" <paul.burrows@nospam.co.nz> wrote in message
> news:uUZM9KcfEHA.1764@TK2MSFTNGP10.phx.gbl...
> > I installed a Cisco 837 router on a server running SBS2000 with ISA and
> SQL
> > installed and configured with the default settings
> >
> > After leaving the site Friday with everything apparently working OK I
was
> > contacted by the ISP to warn of excessive use over the weekend. 14,000
MB
> > over the weekend on a site whose normal usage is 600 MB per month. It
> seems
> > only about 20MB was inward with the balance going out. How do I turn on
> > logging so I can track what is happening?
> >
> > I must confess to not locking down the router securely believing
> > (misguidedly?) that ISA would keep the site secure.
> >
> > I noticed the SQL icon on the server that was winking and showing a red
> > knick on it I had not seen before. Is this related to anything?
> >
> > The server and all clients have been checked today for viruses with
> Symantec
> > Corporate with up to date definitions and nothing has shown up.
> >
> > The problem is not there when running on the old Nokia router which I
have
> > put back in place until I find out what is wrong with the Cisco
> > configuration (if that is the problem).
> >
> > Has anyone any thoughts on what is going on? Any help would be much
> > appreciated.
> >
> > Paul
> >
> >
>
>



Re: Excessive internet usage after installing Cisco 837 router by Cris

Cris
Tue Aug 10 17:37:42 CDT 2004

actually it could be either or both

--
CRIS HANNA
SBS-MVP
--------------------------------------------------------
Please do not respond to me directly by email but only in the newsgroups so
that all can benefit from the information
"Paul Burrows" <paul.burrows@nospam.co.nz> wrote in message
news:e%23c%23kFmfEHA.4092@TK2MSFTNGP10.phx.gbl...
> When you say router configuration, do you mean I simply haven't blocked
the
> required ports or do you mean that something deep in the configuration is
> wrong and the router itself is broadcasting data?
>
>
>
> "CRIS HANNA (SBS-MVP)" <crishannanospam@computingpossibilities.net> wrote
in
> message news:uCoU9CjfEHA.3476@tk2msftngp13.phx.gbl...
> > Well if the problem is present when CISCO is there and not when the old
> > router is in place, then obviously the problem is in the CISCO router
> > config. It must be broadcasting something or the other remote
> possibility
> > is that one of the workstations has spyware which is broadcasting but
the
> > old router has that port blocked?
> >
> > --
> > Cris Hanna (SBS-MVP)
> > _____________________
> > Please only respond in the Newsgroup and not directly to me, so that
> > everyone can share the information
> > "Paul Burrows" <paul.burrows@nospam.co.nz> wrote in message
> > news:uUZM9KcfEHA.1764@TK2MSFTNGP10.phx.gbl...
> > > I installed a Cisco 837 router on a server running SBS2000 with ISA
and
> > SQL
> > > installed and configured with the default settings
> > >
> > > After leaving the site Friday with everything apparently working OK I
> was
> > > contacted by the ISP to warn of excessive use over the weekend. 14,000
> MB
> > > over the weekend on a site whose normal usage is 600 MB per month. It
> > seems
> > > only about 20MB was inward with the balance going out. How do I turn
on
> > > logging so I can track what is happening?
> > >
> > > I must confess to not locking down the router securely believing
> > > (misguidedly?) that ISA would keep the site secure.
> > >
> > > I noticed the SQL icon on the server that was winking and showing a
red
> > > knick on it I had not seen before. Is this related to anything?
> > >
> > > The server and all clients have been checked today for viruses with
> > Symantec
> > > Corporate with up to date definitions and nothing has shown up.
> > >
> > > The problem is not there when running on the old Nokia router which I
> have
> > > put back in place until I find out what is wrong with the Cisco
> > > configuration (if that is the problem).
> > >
> > > Has anyone any thoughts on what is going on? Any help would be much
> > > appreciated.
> > >
> > > Paul
> > >
> > >
> >
> >
>
>