Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

While setting up my iptables, I've noticed that when disabling a network adapter (at least in Windows 2012 Server), HTTP and HTTPS requests are made to various Akamai-owned addresses. I can't think why.

I haven't had a closer look at the payload with Fiddler or anything, but does anyone know what these requests are for? Seems pretty odd to me.

share|improve this question
Does the server in question have the Akamai NetSession Interface service installed? – Chris McKeown Sep 6 '13 at 22:52
See what's in the requests, then. – Michael Hampton Sep 7 '13 at 2:23
up vote 2 down vote accepted

I would suspect this is network location awareness:

Basically, Windows is making HTTP requests to verify it still has a connection to the internet.

share|improve this answer
Yes, I think that's probably right, was thinking it might be NLA after looking at it. I'll investigate the packets, though alot of them are HTTPS. – nicodemus13 Sep 9 '13 at 9:14
See also NCSI... – Ryan Ries Mar 10 '15 at 1:15

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.