Re: Google "Unusual traffic from your computer network" notification

[Randall C Grimshaw <rgrimsha () SYR EDU>]

Michael:
   Is there any chance that your network is running behind a NAT?

Randall Grimshaw rgrimsha () syr edu<mailto:rgrimsha () syr edu>

________________________________
From: The EDUCAUSE Security Constituent Group Listserv [SECURITY () LISTSERV EDUCAUSE EDU] on behalf of Michael J. 
Kenney [m.kenney () USCIENCES EDU]
Sent: Monday, December 09, 2013 8:37 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Google "Unusual traffic from your computer network" notification

We’ve been getting these notifications pretty much on a daily basis and trying to find the problem is like finding a 
needle in a haystack. https://support.google.com/websearch/answer/86640?hl=en

Anyone happen to have a short term solution that could help find the infected computer(s) such as traffic patterns that 
are being sent to Google? Also a long term solution possibly an anti-malware appliance such as FireEye that could help 
protect against these types of threats that our Sonicwall IPS cannot? We have a Snort server, but that is more reactive 
than proactive and there are just too many.


Thanks,

Michael