Welcome to ISAserver.org

Logs

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 General] >> General >> Logs

Page: [1]

Message

<< Older Topic Newer Topic >>

Logs - 14.Mar.2008 1:55:49 PM

jacksonsc56

Posts: 1
Joined: 14.Mar.2008
Status: offline

Hi all,

Working in a mixed environment of Mac and PC's, the Mac's are web proxy clients and the pc's are web proxy and firewall clients.

No default allow all rules exist. However there is a Allow All for Domain Users rule and an Allow all for a client set that allow Mac users access on a static ip system.

Looking through the logs under 'traffic for users', I see I am listed twice causing a good few requests, one with a IP and one with DOMAIN\firstname.lastname.

Why is this?

Any help is much appreciated.

Kind regards,
Chris

Post #: 1

Featured Links*

RE: Logs - 17.Mar.2008 1:26:05 AM

AHIT

Posts: 1561
Joined: 22.Jul.2002
From: Sydney, Australia
Status: offline

Easy!

Your browser asks for a webpage sent via the proxy.
The proxy (ISA) responds that credentials are required.
Your browser re-sends the request this domain with credentials.

So, in the logs:
there's a request for page logged to IP only (with no credentials) with is DENIED
there's a sencond entry with your domain credentials.

The 'request' isn't sent out across the internet to the remote site, the double request is merely from your browser to the ISA proxy.

hope this helps!

_____________________________

http://www.ahit.com.au/isa
(Previous nick: Tolk)

(in reply to jacksonsc56)

Post #: 2