Welcome to ISAserver.org

Logging and Reporting Questions

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Logging and Reporting >> Logging and Reporting Questions

Page: [1]

Message

<< Older Topic Newer Topic >>

Logging and Reporting Questions - 12.Jun.2007 9:45:37 AM

CryptoPKI

Posts: 11
Joined: 1.Jun.2007
Status: offline

At work I have an ISA box setup as a web proxy server. I setup a few users to use this so I can log their web activity, but when I start a query I see their username as "anonymous" how can I get ISA to display their appropriate username in the query?

Thanks

-CryptoPKI

< Message edited by CryptoPKI -- 12.Jun.2007 10:02:27 AM >

Post #: 1

Featured Links*

RE: Logging and Reporting Questions - 12.Jun.2007 11:45:01 AM

elmajdal

Posts: 5061
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

Hi,

to log username, your clients should be configure as WebProxy and/or firewall client .

HTH,
Tarek

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to CryptoPKI)

Post #: 2

RE: Logging and Reporting Questions - 12.Jun.2007 11:52:01 AM

CryptoPKI

Posts: 11
Joined: 1.Jun.2007
Status: offline

If you mean setting up their IE browsers to use our proxy server then yes they are setup as a web proxy client.. Also under the internal configuration properties I have "EnableWeb Proxy Clients" checked off, with unlimited connections and integrated authentication.

Am I missing something else?

Thanks

< Message edited by CryptoPKI -- 12.Jun.2007 11:57:14 AM >

(in reply to elmajdal)

Post #: 3

RE: Logging and Reporting Questions - 12.Jun.2007 12:09:03 PM

elmajdal

Posts: 5061
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

Hi,

on the contrary, if you need Web Proxy to be enabled, you need to check this option :

HTH,
Tarek

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to CryptoPKI)

Post #: 4

RE: Logging and Reporting Questions - 12.Jun.2007 12:18:01 PM

CryptoPKI

Posts: 11
Joined: 1.Jun.2007
Status: offline

Yep, that's what I have enabled. Users can browse the web fine using the ISA server, it's just when I check the logs the user is always anonymous. This would be fine but our users are on a citrix environment so I only see the acutal server as the ip address browsing the web.

(in reply to elmajdal)

Post #: 5

RE: Logging and Reporting Questions - 12.Jun.2007 2:28:43 PM

elmajdal

Posts: 5061
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

Hi,

What rules do you have for outbound on your ISA Server? make sure not to use the ALL Users codition, and user usernames/group from your AD

HTH,
Tarek

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to CryptoPKI)

Post #: 6

RE: Logging and Reporting Questions - 12.Jun.2007 2:51:36 PM

CryptoPKI

Posts: 11
Joined: 1.Jun.2007
Status: offline

Yeah, I was using the "All Users" group... Whenever I try making a group then adding users from Active Directory, I get this error:

I am running Win 2k3 SP1 w/ ISA 2k4 standard.. I was told to add SP3 for ISA but whenever I add that service pack the firewall service wont start.

(in reply to elmajdal)

Post #: 7

RE: Logging and Reporting Questions - 12.Jun.2007 3:49:58 PM

elmajdal

Posts: 5061
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

Hi,

indeed, you need at least ISA 2004 SP1 to solve the rpc problem.

for the SP3 problem, check this : http://blogs.technet.com/isablog/archive/2007/05/03/isa-server-2004-service-pack-3-rollback-failure-and-temporary-resolution.aspx

HTH,
Tarek

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to CryptoPKI)

Post #: 8