Downstream compromise

Having trouble figuring out what is causing the downstream on the primary router to be compromised. SQL Server 2008 SP1 running on Windows Server...
Downstream compromise
Having trouble figuring out what is causing the downstream on the primary
router to be compromised. SQL Server 2008 SP1 running on Windows Server 2008
fully SP’d… Netopia Router, SBS 2003 R2/ISA 2004 Domain.

When a user connects to the Windows Server 2008, if there is any kind of a
time-out for any variety of reasons… insufficient permission for the user
on SQL, user connects via RDC and permissions fail because password is typed
in incorrectly, user connects to IIS on the server and permission fails (all
examples). For any of these, the downstream for the domain drops off usually
to about 384 which is pitiful. It isn’t very fast to begin with (ATT ADSL,
end of the line – out three miles from the source so it only runs downstream
at 1536).

Cannot figure out why the downstream is being compromised – only clues are
general above plus what is in the log – which all appear as permission issues
in the security log. Is there a service on Windows 2008 that checks security
that goes above and beyond what is handled by ISA 2004 which I can turn off
until we can figure out exactly what causes the downstream to be compromised.

Have to reboot the router more than once a day. Not good practice.

Regards,
Jamie

We will be happy to hear your thoughts

Leave a reply

TechEggs
Logo