isa 2006 max connections

I get this error message in ISA 2006 eventviewer logs quite often for machines that are no infected. How can I find out what is maxing out the connections. I am not seeing anything on the clients.

The number of HTTP requests per minute from the source IP address 192.168.7.8 exceeded the configured limit. ISA Server will block new HTTP requests sent from this IP address.
LVL 6
Sid_FAsked:
Who is Participating?
 
Craig BeckCommented:
If you're sure there's no infection you can change the limit.  Have a look here...

https://technet.microsoft.com/en-us/library/dd441028.aspx
0
 
David Johnson, CD, MVPOwnerCommented:
192.168.7.8 exceeded the configured limit  -- check that device
0
 
Sid_FAuthor Commented:
As mentioned I am not seeing anything on the client. It comes up clean for AV.
0
Cloud Class® Course: SQL Server Core 2016

This course will introduce you to SQL Server Core 2016, as well as teach you about SSMS, data tools, installation, server configuration, using Management Studio, and writing and executing queries.

 
Sid_FAuthor Commented:
Ok but that still doesn't tell me what is in the traffic. It just allows me to up the limit. Thanks. I want to find out where the log file is for the traffic before I can say its safe or not.
0
 
David Johnson, CD, MVPOwnerCommented:
then use wireshark to analyse the network traffic
0
 
Sid_FAuthor Commented:
Wireshark would work if if it was happening every few minutes but this might not happen for another 5-7 days. Wireshark files would be too many plus I would be taking a performance hit monitoring all traffic.
0
 
Sid_FAuthor Commented:
Request to close.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.