Q1 - how is ISA configured; single- or multi-network? Q2 - is ISA acting as a firewall or just a proxy behind SEF? Q3 - what IP is the ISP quoting when they refer to the broadcasts? You can stop NetBIOS name broadcasts by adding the following registry value: HKLM\System\CurrentControlSet\Services\NetBT\Parameters Name = NodeType Type = DWORD Value = 2 ** Note that this setting is also #46 in your DHCP server or scope options <HINT> ** Additionally, ISA 2004 installations may need to have the following value: HKLM\System\CurrentControlSet\Services\Tcpip\Parameters Name = EnablePMTUDiscovery Type = DWORD Value = 1 Both values require a machine reboot to take effect. From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Shamshad Ahmad Sent: Wednesday, January 17, 2007 11:46 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Slow Internet Dear All, I have ISA 2004 and around 150 firewall clients, my Internet suddenly slowed down and my ISP complains that any of the machines from form internal network is doing data broadcast which is eating bandwidth. How do I get to know which machine is doing that can I find from ISA server or need to opt another way. Please suggest Sincerely, Shamshad Ahmad All mail to and from this domain is GFI-scanned.