Technical Discussion
  >> Security Related Issues


Register (or login) on our website and you will not see this ad.


These posts have been archived and can no longer be replied to or modified.
  Print Thread
Standard User deleted
(deleted) Wed 18-Feb-09 17:19:42
Print Post

Akamai Technologies?


[link to this post]
 
Anyone know anything about this outfit? We have a strange connection/connection attempt on our firewall which reports an IP of 81.52.134.158 which is a France Telecom range, but reports back to Akamai - they seem to do web acceleration and similar? ISP is Entanet.
Thanks
Standard User deleted
(deleted) Wed 18-Feb-09 17:46:30
Print Post

Re: Akamai Technologies?


[re: deleted] [link to this post]
 
Doubt there's anything sinister about it. They're specialists in distributed computing platforms for content and application delivery. Many large software vendors, such as Microsoft, Sun, Adobe, use Akamai to distribute software and associated updates. ISTR that quite a few of the well-known AV vendors e.g. Sophos, McAfee, etc. also use Akamai as a platform to distribute AV updates.

A bit more can be found here on Wikipedia, and their main corporate website is here.
Standard User deleted
(deleted) Wed 18-Feb-09 19:23:51
Print Post

Re: Akamai Technologies?


[re: deleted] [link to this post]
 
Mike - that sounds the likely answer - do you know if they perhaps host part of the Microsoft Update network? I'll know shortly what it was being used for as I have blocked their IP both in & outward at one of our firewalls!

PS - a bit of research shows they do, but there are issues!! - one report reveals that for every static file downloaded from Akamai, an attempt is made to breach the firewall. The intent of this, is a load-balancing measure; in an effort to see which server responds fastest, it will send a packet of data to the user�s computer from each of it�s servers and see which one bounces back quickest. The trouble is, with a firewall, the packet doesn�t bounce - it sticks, intercepted by the firewall - and when nothing comes back, Akamai will continuously make attempt after attempt instead of simply choosing a server at random (or by some other criteria). Norton Personal Firewall views these as �suspicious activity� and won�t let them through, nor will it dignify them with a response. Presumably other firewalls will react similarly. The end result: any site with Akamai multi-server hosting will either load REALLY slowly (if only part of the static content eg images, secure content, etc. is hosted over multiple servers by Akamai) or time out entirely (if the whole site is hosted this way) as Akamai makes hundreds if not thousands of attempts to breach the firewall for a single page download.
Certainly seems to be an issue - and explains a leap in the data use on our network that uses WSUS for updates - Akamai's IP's are away to be added to the blocked list!

Edited by deleted (Wed 18-Feb-09 20:46:54)


Register (or login) on our website and you will not see this ad.

Standard User Pipexer
(knowledge is power) Thu 19-Feb-09 00:31:54
Print Post

Re: Akamai Technologies?


[re: deleted] [link to this post]
 
Norton Personal Firewall

And there is the problem!

Zen 8000 Active
  Print Thread

Jump to