Good morning,
I have done a fair amount of searching about the problem we experianced this morning within one of our business units but I have come up empty handed. Because of the distributed nature of this business unit, bandwidth is always a concern. This morning, roughly 40 sepm clients (of roughly 200, so about 20% of them) decided to download between 94MB and 129MB from our SEPM server located in their domain.
After looking through these machines there seems to be no pattern, they are all windows xp or vista, they are all running various client versions (anwhere from 11.0.2 to 11.0.6) and some are updated to todays defs while others are still showing October 28th as their latest definition package.
The WAN team is inquiring with me why this happened, as they had to throttle SEP back on port 8014 manually as it was saturating many of the lines this morning. Since then the issue has resolved itself and the clients are no longer requesting all this data.
I am used to seeing 3-5MB going to machines on a monday morning but I have never seen 94-129MB of data being requested, for what seems to be no good reason.
What steps can I take to find out WHAT caused this, and how to ensure it doesn't happen in the future? Thanks for any help in advance.