5 Replies Latest reply on Apr 6, 2009 9:26 PM by mrgui

    MEE Admin Console making connection to Netherlands?

    mwilke
      I am working with a client who everytime they open the MEE Admin console, from the actual server or from a desktop with it installed, is making a connection to some FTP server in the Netherlands.

      I have a test environment setup on virtual machines using the same build 5500 as they are using and the connection does NOT show up on my side.

      If you do a NETSTAT before connecting to the Admin Console you get something like this:

      Proto Local Address Foreign Address State
      TCP LTIBLPLYLH2:1066 localhost:62514 ESTABLISHED
      TCP LTIBLPLYLH2:62514 localhost:1066 ESTABLISHED


      As soon as you open and authenticate to the Admin Console you get this:

      Active Connections
      Proto Local Address Foreign Address State
      TCP LTIBLPLYLH2:1066 localhost:62514 ESTABLISHED
      TCP LTIBLPLYLH2:62514 localhost:1066 ESTABLISHED
      TCP LTIBLPLYLH2:1166 165.221.36.52:5555 ESTABLISHED - this is the MEE SERVER
      TCP LTIBLPLYLH2:1169 62-192-111-187.dsl.easynet.nl:http ESTABLISHED - This is the UNKNOWN FTP Server connection. The connection goes away in approx. two minutes.

      Any ideas on this one? Why would there be an active connection to an FTP server in the Netherlands when authenticating to the MEE server using the Console?

      It only appears to be happening to the client i am working with... like i said, i cant duplicate it and McAfee general support cant either.