We've come across an issue where our Lync clients are transferring about 500 MB of data going to and from our EWS server in a "normal" day. It's having a huge impact on our remote sites but we can't figure out what it is.
We use it for IM, Lync audio, desktop sharing. We only have internal users so no edge servers and we have no telephony integration.
Our remote users are in facilities connected via VPN. Each facility only has a T1.
For the sampling of users we have, their normal 8 hour day consists of 1-2 audio calls totalling at most 60 minutes and a few IM conversations. Desktop sharing is used rarely (and not in our testing) so I don't know what kind of impact that would have on the data. On average, our users have 30-35 contacts each.
Our address book files total about 85 KB and look to only update first thing in the morning so I don't think they're the culprit.
Our firewall is showing the data going across port 443 but netstat -b is showing different port numbers (i.e. 17795 and 17636 for Lync, there are others).
I need to figure out why so much data is being transferred and how we correct it.
I haven't had any luck searching and I'm hoping someone here can help.
ps Sorry if I have the wrong forum, wasn't sure where to post this