Welcome to ISAserver.org

IP monitor

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> General >> IP monitor

Page: [1]

Message

<< Older Topic Newer Topic >>

IP monitor - 21.Mar.2006 12:57:18 PM

majedalanni

Posts: 64
Joined: 7.Jan.2006
Status: offline

Hi all,

I need help in two things
1) I need program that monitor IP bandwidth (real time not web interface).I want see host(FWC) bandwidth realtime
2) how I disabe the sharing (ie when a client make search he got nothing even some client make sharing in some folder)

Many Thanks
bye

Post #: 1

Featured Links*

RE: IP monitor - 21.Mar.2006 6:28:16 PM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Maj,

1. Websense or SurfControl should do this, check them out

2. Sharing what?

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to majedalanni)

Post #: 2

RE: IP monitor - 22.Mar.2006 9:06:49 AM

majedalanni

Posts: 64
Joined: 7.Jan.2006
Status: offline

Hi Tshinder,

If one of my client share some folders in his pc .How I prevet the other clients to see this sharing folders

ie no files sharing between clients.

Many thanks

(in reply to tshinder)

Post #: 3

RE: IP monitor - 22.Mar.2006 11:35:29 AM

elmajdal

Posts: 5074
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

ISA does not control whats behind it , its only job is to control what is going THROUGH it.

so where is your ISA , is it an EDGE firewall or u r using it as a router between different networks inside ur LAN /

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to majedalanni)

Post #: 4

RE: IP monitor - 22.Mar.2006 5:25:54 PM

majedalanni

Posts: 64
Joined: 7.Jan.2006
Status: offline

Hi

Its edge firewall its is like that

Internet------------ISA-----Access Point----- Wireless Clients

Thanks

(in reply to elmajdal)

Post #: 5

RE: IP monitor - 22.Mar.2006 5:32:55 PM

elmajdal

Posts: 5074
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

then as i said :

quote:

ISA does not control whats behind it , its only job is to control what is going THROUGH it.

if i understand u right , u want to restrict ur Internal CLients ( Wireless Clients) to be able to share folder, and u dont want other Users in the Internal Clients to be able to access these shared folder. right?

if the answer is true , then Its not the Job of ISA.

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to majedalanni)

Post #: 6

RE: IP monitor - 22.Mar.2006 10:43:20 PM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi El,

You are correct!

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to elmajdal)

Post #: 7

RE: IP monitor - 23.Mar.2006 6:13:54 PM

majedalanni

Posts: 64
Joined: 7.Jan.2006
Status: offline

Hi

I dont have internal Clients I just have wireless clients and I want prevent them from shareing folders

thanks

< Message edited by majedalanni -- 23.Mar.2006 9:52:32 PM >

(in reply to tshinder)

Post #: 8

RE: IP monitor - 24.Mar.2006 12:26:08 AM

elmajdal

Posts: 5074
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

aint you the one who draw this :

Internet------------ISA-----Access Point----- Wireless Clients

users on ur left side of ISA is called External Clients , users on your right side of ISA is called Internal.

now , u can call them X , Y , Wireless or whatever , in the end , Technically they are called INTERNAL.
when u create a Rule, dont u create a rule from Internal to External !!!

now u can say no , iam using computer set or whatever , in the end they are INTERNAL !

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to majedalanni)

Post #: 9

RE: IP monitor - 24.Mar.2006 9:52:49 PM

majedalanni

Posts: 64
Joined: 7.Jan.2006
Status: offline

Hi,
Okay
I talk about my internal clients it all wireless clients and leave the external .
how I block internal clients (wireless clients) from sharing folders???????

Thanks alot

(in reply to elmajdal)

Post #: 10

RE: IP monitor - 24.Mar.2006 10:32:10 PM

elmajdal

Posts: 5074
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

i already answered this question , and Tom confirmed it.

Not the job of ISA.

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to majedalanni)

Post #: 11

RE: IP monitor - 25.Mar.2006 4:55:23 PM

majedalanni

Posts: 64
Joined: 7.Jan.2006
Status: offline

HI

Can I make a rule from internal to internal and block the sharing packet

thanks alot

(in reply to elmajdal)

Post #: 12

RE: IP monitor - 25.Mar.2006 7:49:23 PM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Maj,

1. Where is the client?

2. Where is the ISA firewall?

3. Where is the server?

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to majedalanni)

Post #: 13

RE: IP monitor - 25.Mar.2006 7:56:30 PM

majedalanni

Posts: 64
Joined: 7.Jan.2006
Status: offline

Hi,

Internet------------ISA-----Access Point----- Wireless Clients

this is my all diagram

I want just block the (wireless clients) share folders between them

Many thanks

(in reply to tshinder)

Post #: 14

RE: IP monitor - 25.Mar.2006 7:59:10 PM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Maj,

OK, the ISA firewall can't do that, since its not in the path.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to majedalanni)

Post #: 15

RE: IP monitor - 25.Mar.2006 8:01:25 PM

majedalanni

Posts: 64
Joined: 7.Jan.2006
Status: offline

HI

Did you mean the shareing do in access point and data will transfer before it reach to ISA????

Thanks

(in reply to tshinder)

Post #: 16

RE: IP monitor - 25.Mar.2006 8:03:33 PM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Maj,

Yes, since the file servers and the AP are behind the ISA firewall, the ISA firewall can't block the traffic since the ISA firewall doesn't see the traffic.

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to majedalanni)

Post #: 17