Having to restart Firewall service all the time 1

[towntopic]

The administrator for our company is out for a week and we are having issues. It seems that using any ports aside from port 80 become REALLY slow. 25, 110, 443, 1863 become so slow that they eventually error out.

The only thing I've been able to do to fix it is to restart the Firewall service. This fixes the issue, but then it returns in a little while.

Any ideas? I'm just hoping it's not a virus...

 

[dput]

It sounds like you need to investigate your activity. You may want to look at the ISA logs (which aren't the easiest to read). The GFI ISA monitor is a nice real time tool to show activity. Looking at these may give you an idea of what is happening.

When other ports like 25, 110, etc slow down, is port 80 activity still normal?

Dan

 

[towntopic]

Dan,

Thanks for your reply. I actually had found the logs just before you posted and found out that a particular user was hammering port 445 (korgo.s and korgo.v).

After taking him off the network, removing the virus, updating XP with all critical updates we are back to a normal state. Actually taking him off the network was the quick fix and fixing his computer took about 3 hours.

The answer to your question was YES, we didn't see a slow down on port 80, just all other ports.

I'll give you a star as had I not found the logs before your post it would have led to a resolution and for the real time monitoring tool. I'll have to check it out.

regards,
john myers