• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

GFi WebMonitor log contains external IP addresses

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 Firewall] >> Logging and Reporting >> GFi WebMonitor log contains external IP addresses Page: [1]
Login
Message << Older Topic   Newer Topic >>
GFi WebMonitor log contains external IP addresses - 25.May2010 3:15:08 PM   
ReschMark

 

Posts: 5
Joined: 20.Jul.2004
Status: offline
Hi All

We run GFi WebMonitor on ISA 2004. Recently I noticed that the 'Top Policy Breakers' report (from WebMonitor) contains two entries indicating the requests to an anonymouse proxy site were blocked. That part makes sense - we don't allow users to access to anonymous proxies.

The source IP address on these requests, however, is NOT one of our internal IP addresses. It is an IP from Beijing, China that is a well known source or port scans and other hacking attempts.

Has anyone else seen this sort of thing? Can anyone offer an explaination as to how a Chinese IP address is (at least to WebMonitor) appearing to originate from my private network?

Thanks much
-Mark
Post #: 1
RE: GFi WebMonitor log contains external IP addresses - 28.May2010 8:20:11 AM   
elmajdal

 

Posts: 6022
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
Maybe an Internal User is using a chinese proxy server :)

_____________________________

Tarek Majdalani

Windows Expert - IT Pro MVP
Facebook : https://www.facebook.com/ElMajdal.Net

(in reply to ReschMark)
Post #: 2

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 Firewall] >> Logging and Reporting >> GFi WebMonitor log contains external IP addresses Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts