Link to home
Start Free TrialLog in
Avatar of cybrexus
cybrexusFlag for Australia

asked on

Computers periodically pinging the server through VPN?!

I have a Cisco PIX router/firewall, an SBS server sitting behind it, and a VPN tunnel from router to another remote site router.
Why do the computers in the remote site periodically ping the SBS server?? Is it normal?
messages.PNG
ASKER CERTIFIED SOLUTION
Avatar of MightySW
MightySW
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of ricks_v
ricks_v

I dont think it's normal for a continuous ping packets being sent from the server.
 I would think some monitoring program or similar is installed on the server (maybe router traffic monitoring). IF you have access to the server, you should have a look what applications are running on the server causing the unnecessary ping traffic to the router..
its on the same subnet.  Is the response coming from the remote site?
Again, this is just what an IDS/IPS log will show.  I have seen this before.  You can stop it by removing echo-reply and timestamps.
Run wireshark on your switch that the PIX is on and see if you can see how large the TCP packets are.  I will almost bet my paycheck that they are ICMP fragments as this is the way that Group Policy performs it's slow link detection or whether or not to send the GP at all.  If this is down then the GP will not be applied and 90 minutes later the remote site will have a partial replica of the GC.
Avatar of cybrexus

ASKER

thanks guys, that's what I thought - slow link detection. I have disabled it through GP and no more icmps.
Glad that took care of it.