Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

ISA 2006 on SQL DB

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 Firewall] >> Logging and Reporting >> ISA 2006 on SQL DB Page: [1]
Login
Message << Older Topic   Newer Topic >>
ISA 2006 on SQL DB - 27.Feb.2008 3:24:52 PM   
gharding

 

Posts: 1
Joined: 12.Aug.2007
Status: offline 		Hi there... NEWBIE questions:

I have ISA 2006 EE, logging to SQL 2000 database.  I am trying to create a SQL Analyzer query to show all distinct users, and the websites they have visited, and at what times they launched that page, and how long they were there.  I see in the WebProxyLog that practically every single component of a web page gets logged.  For example, I type in www.microsoft.com, and I see rad.microsoft.com, img.microsoft.com, ad.liveperson.com, etc. in the web proxy log.

The following fields show up with URL addresses, but each one shows tons of undesired info (as mentioned above).  Which field do I use:  DESTHOST, REFERREDSERVER, or URI?  


Also, in the SQL tables, it shows various IP address fields as what appears to be a serial number representation of the IP address.  Is there any way to correct this to show the true IP address?  I have LogHostName installed, but maybe I'm missing something?

Any help is appreciated.
Post #: 1
RE: ISA 2006 on SQL DB - 24.Jun.2008 11:38:40 AM   
itadmin

 

Posts: 30
Joined: 21.Jul.2006
Status: offline 		Did anyone come up with an answer for his question about the serial number representation of IP addresses?  I have the same issue.  (I will search old posts and reply if I find something.)

(in reply to gharding)
Post #: 2
RE: ISA 2006 on SQL DB - 24.Jun.2008 4:58:44 PM   
elmajdal

 

Posts: 4959
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline 		Hi ,

Check this : How to convert an IP address from the firewall log into a dotted IP address in Internet Security and Acceleration Server 2004

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to itadmin)
Post #: 3

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 Firewall] >> Logging and Reporting >> ISA 2006 on SQL DB Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts