The version of SC before the hotfix disregarded incoming HTTP traffic - only outgoing authenticated web proxy client traffic. Now this hotfix monitors firewall, and anonymous snat clients, as well as the web proxy clients. This traffic rapidly increases the msde db. greg ________________________________ From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] Sent: Friday, September 30, 2005 3:21 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Surfcontrol SNat and firewall clients - revisted. hotfix1 http://www.ISAserver.org Ah - that's mo' clearer. Bear in mind that the SC plugin is hooked into the web proxy filter, which is notified of *all* HTTP traffic. Consequently, no matter where the call originated or is destined, the SC filter will hear of it. ------------------------------------------------------- Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/Jim_Harrison/ <http://isaserver.org/Jim_Harrison/> http://isatools.org <http://isatools.org/> Read the help / books / articles! ------------------------------------------------------- ________________________________ From: Crockett, Gregory [mailto:Gregory.Crockett@xxxxxxxxx] Sent: Friday, September 30, 2005 13:16 To: [ISAserver.org Discussion List] Subject: [isalist] RE: Surfcontrol SNat and firewall clients - revisted. hotfix1 http://www.ISAserver.org These clients are routed through ISA to different subnets. ________________________________ From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] Sent: Friday, September 30, 2005 1:46 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Surfcontrol SNat and firewall clients - revisted. hotfix1 http://www.ISAserver.org What's the point of making internal clients go to ISA to reach internal resources? ------------------------------------------------------- Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/Jim_Harrison/ <http://isaserver.org/Jim_Harrison/> http://isatools.org <http://isatools.org/> Read the help / books / articles! ------------------------------------------------------- ________________________________ From: Crockett, Gregory [mailto:Gregory.Crockett@xxxxxxxxx] Sent: Friday, September 30, 2005 06:01 To: [ISAserver.org Discussion List] Subject: [isalist] Surfcontrol SNat and firewall clients - revisted. hotfix1 http://www.ISAserver.org Some months ago Surfcontrol released a hotfix for their version 5 on ISA 2004 - I just learned of the release and installed. Yes, it now monitors SNAT and firewall clients. Our install monitors and interacts with incoming web request to our internal web sites. Has anyone else seen this with this hotfix? greg ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: gregory.crockett@xxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: gregory.crockett@xxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx All mail to and from this domain is GFI-scanned.