Good day all.
I need some help and/or advice. Here is some background.
Clients logged a call stating the Internet was not working, which was weird seeing as I was using Remote Desktop and working on the servers.
I proceeded to ask the ISP to check the routers on their side and if something changed, apparently not. From our side we did not change any on the server or router/Firewall. The issue was that any HTTP website not load, whereas HTTPS sites work fine. All other internet related services are good aswell, ie RDP, mail etc.
I should also mention that we had a ransomeware attack later on, but this was after the internet acted up.
I checked the following, rules for ports 80, 443 on Firewall are in place, scanned the DC and other servers with AV, currently running another one.
I tried wireshark, fiddler and can not see anything odd, but I'm no expert.
More odd happenings: I don't think it is an AV issue, because, as soon as I plug in my Laptop on the network, same issue, but if I use my own Internet, no issue. Did the clearing of browsers, but this is not related to any one Browser.
Has anyone had this issue before?