I have have a small network (20 users) running ISA Server 2000 under Windows Server 2003. Although I'm no security experty, I feel I have a good understanding of ISA Server. To my knowledge, anonymous outbound access is disabled, although this doesn't mean that something may be configured incorrectly. Here's my question:
Why would there be unknown (anonymous) IPs listed under client sessions? None of the IPs belong to the network. A WhoIs lookup shows countries of origin such as China, Canada, and Latin America. I can't imagine this being a good thing.
What would the benefit be for someone to connect (or piggy-back) one's network, assuming that's the case?
Any insight would be greatly appreciated!