Sign in
Microsoft.com
 
Forefront Client Security TechCenter
 
 
 
Forefront Client Security TechCenter > Forefront Client Security Forums > Forefront Client Security Alerting and Monitoring > Illegal file download
Ask a questionAsk a question
Search Forums:
 

AnswerIllegal file download

  • Monday, June 29, 2009 3:06 PMBuzy Mind Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote
    I have been ordered to find the person(computer) from my network who downloaded an illegal file from the internet. How do i do this please?

    Thanks
    • Edited byBuzy Mind Monday, June 29, 2009 3:16 PM
    •  
     

Answers

  • Tuesday, June 30, 2009 10:29 AMNick Gu - MSFTMSFT, ModeratorUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Sign In to Vote
    0
    Sign In to Vote

    Hi,

     

    Thank you for your post.

     

    Before going any further, I’d like to confirm whether you want to monitor the network using Forefront Client Security. If that is right, I am afraid you cannot achieve your goal.

     

    As we know, Forefront Client Security helps guard against emerging threats, such as spyware and rootkits, as well as traditional threats, such as viruses, worms, and Trojan horses. If you want to monitor you network or get the real-time network usage, you may find these on report from the ISA Server 2006. In addition, we also use some 3rd part Network Monitor software to do that.

     

    Regards,

    Nick Gu - MSFT
     
  • Saturday, July 04, 2009 7:10 PMJohan Blom, Forefront MVPMVPUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Sign In to Vote
    0
    Sign In to Vote
    you will have to find out what site it was downloaded from and then look in the firewall logs to find out which computer on your internal network visited that site.
    If you know roughtly what time this happend you can filter on that timeframe.

    /johan
    MCSE, forefront spec | www.msforefront.com
     

All Replies

  • Tuesday, June 30, 2009 10:29 AMNick Gu - MSFTMSFT, ModeratorUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Sign In to Vote
    0
    Sign In to Vote

    Hi,

     

    Thank you for your post.

     

    Before going any further, I’d like to confirm whether you want to monitor the network using Forefront Client Security. If that is right, I am afraid you cannot achieve your goal.

     

    As we know, Forefront Client Security helps guard against emerging threats, such as spyware and rootkits, as well as traditional threats, such as viruses, worms, and Trojan horses. If you want to monitor you network or get the real-time network usage, you may find these on report from the ISA Server 2006. In addition, we also use some 3rd part Network Monitor software to do that.

     

    Regards,

    Nick Gu - MSFT
     
  • Saturday, July 04, 2009 7:10 PMJohan Blom, Forefront MVPMVPUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Sign In to Vote
    0
    Sign In to Vote
    you will have to find out what site it was downloaded from and then look in the firewall logs to find out which computer on your internal network visited that site.
    If you know roughtly what time this happend you can filter on that timeframe.

    /johan
    MCSE, forefront spec | www.msforefront.com