Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Tool for internet usage monitoring

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 General] >> General >> Tool for internet usage monitoring Page: [1] 2   next >   >>
Login
Message << Older Topic   Newer Topic >>
Tool for internet usage monitoring - 2.Sep.2008 4:55:11 AM   
mrjahnara

 

Posts: 52
Joined: 12.Aug.2008
From: Dubai
Status: offline
Hi,

      I am monitoring internet usage and generating internet usage report in the ISA Server everyday. But with the ISA report i can see only the top 15 users usage.
     Can any one tell me , is there any other monitoring tool available that can work with ISA server 2006? Please suggest




Regards

Abdul Rahuman.M

Post #: 1
RE: Tool for internet usage monitoring - 2.Sep.2008 6:31:55 AM   
elmajdal

 

Posts: 5061
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
Hi,

Check this : http://www.isaserver.org/software/ISA/Reporting/

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to mrjahnara)
Post #: 2
RE: Tool for internet usage monitoring - 2.Sep.2008 11:10:23 AM   
paulo.oliveira

 

Posts: 792
Joined: 3.Jan.2008
From: Amazonas, Brazil
Status: offline
Hi,

other option is customize the reports. Go to Reports - on the Tasks choos one of the options and select the Top Users tab.

Regards,
Paulo Oliveira.

(in reply to mrjahnara)
Post #: 3
RE: Tool for internet usage monitoring - 3.Sep.2008 2:22:18 AM   
mrjahnara

 

Posts: 52
Joined: 12.Aug.2008
From: Dubai
Status: offline
Thanks for all your response. I manage to customize the ISA reports now for many users.

Thanks for the kind support.



Regards

Abdul Rahuman.M

(in reply to paulo.oliveira)
Post #: 4
RE: Tool for internet usage monitoring - 4.Sep.2008 1:53:59 AM   
varun25

 

Posts: 54
Joined: 24.Aug.2008
Status: offline
Hi Abdul

How did you manage to do this? Do you get usernames in the report as well or just the client IP addresses?

Varun

(in reply to mrjahnara)
Post #: 5
RE: Tool for internet usage monitoring - 4.Sep.2008 2:11:11 AM   
mrjahnara

 

Posts: 52
Joined: 12.Aug.2008
From: Dubai
Status: offline
Ya i got username ( Domain users) as well as IP Addresses ( other users) in the report.




Regards

Abdul Rahuman.M

(in reply to varun25)
Post #: 6
RE: Tool for internet usage monitoring - 4.Sep.2008 2:21:34 AM   
varun25

 

Posts: 54
Joined: 24.Aug.2008
Status: offline
for some reason i dont get usernames in the logs just the client Ip addresses.

Did you create a rule for this? My ISA server is a member of the domain so i havent configured any LDAPS rules.

Can you please assist?


(in reply to mrjahnara)
Post #: 7
RE: Tool for internet usage monitoring - 4.Sep.2008 2:28:45 AM   
mrjahnara

 

Posts: 52
Joined: 12.Aug.2008
From: Dubai
Status: offline
Hi Varun,

I didnt create any rule for this, but all our client Pc's have firewall client installed.



Regards

Abdul Rahuman.M

(in reply to varun25)
Post #: 8
RE: Tool for internet usage monitoring - 4.Sep.2008 2:37:14 AM   
varun25

 

Posts: 54
Joined: 24.Aug.2008
Status: offline
Is it being used a web proxy in your environment? Do you get web logs as well?

(in reply to mrjahnara)
Post #: 9
RE: Tool for internet usage monitoring - 4.Sep.2008 4:17:24 AM   
elmajdal

 

Posts: 5061
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
quote:

ORIGINAL: varun25

for some reason i dont get usernames in the logs just the client Ip addresses.

Did you create a rule for this? My ISA server is a member of the domain so i havent configured any LDAPS rules.

Can you please assist?




To Get usernames in ISA Server reports, you will need to authenticate your users, that is to set them as Webproxy CLients and/or Firewall CLients.

and make sure to remove the condition ALL Users , and replace it with the ALL Authenticate user group or a user/group from AD.

and by the way. LDAP is only used for inbound rules , and not for outbound access policies.

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to varun25)
Post #: 10
RE: Tool for internet usage monitoring - 4.Sep.2008 4:32:14 AM   
stuarta

 

Posts: 25
Joined: 4.Sep.2008
Status: offline
quote:

To Get usernames in ISA Server reports, you will need to authenticate your users, that is to set them as Webproxy CLients and/or Firewall CLients.

and make sure to remove the condition ALL Users , and replace it with the ALL Authenticate user group or a user/group from AD


Sorry to sound stupid, but how would I go about this?  I have the same problem, all my users are only showing IP addresses.  Some usernames appear but the majority is just ip addresses.

Thanks

(in reply to elmajdal)
Post #: 11
RE: Tool for internet usage monitoring - 4.Sep.2008 4:47:40 AM   
mrjahnara

 

Posts: 52
Joined: 12.Aug.2008
From: Dubai
Status: offline
If all of your users are Domain users , then u can change the condition All Users to All Authenticated users. you will get username in the report.




Regards

Abdul Rahuman.M

(in reply to stuarta)
Post #: 12
RE: Tool for internet usage monitoring - 4.Sep.2008 4:52:18 AM   
stuarta

 

Posts: 25
Joined: 4.Sep.2008
Status: offline
Yep they are all domain users.  I don't see that option anywhere? 

(in reply to mrjahnara)
Post #: 13
RE: Tool for internet usage monitoring - 4.Sep.2008 4:55:11 AM   
stuarta

 

Posts: 25
Joined: 4.Sep.2008
Status: offline
Ah,

In my 'unrestricted internet access rule' I have the condition 'all users'.  I've just added 'all authenticated users' as well.

But would that grab and list every username that goes on there?  Don't obviously want it to miss anyone out.  I'm guessing this is also now going to show this on the live logs as well and my stream out to my MSDE logs?

(in reply to stuarta)
Post #: 14
RE: Tool for internet usage monitoring - 4.Sep.2008 5:25:59 AM   
stuarta

 

Posts: 25
Joined: 4.Sep.2008
Status: offline
ok just noticed that with both of them in there, I still get anonymous.  I removed 'All Users' and it showed the domain user name but their access stopped.

I'm guessing therefore that my users aren't being authenticated.  How should I check this or set it please?

(in reply to stuarta)
Post #: 15
RE: Tool for internet usage monitoring - 4.Sep.2008 7:43:06 AM   
stuarta

 

Posts: 25
Joined: 4.Sep.2008
Status: offline
Sorry adding to this yet again, I've found a post saying that I need to alter my internal network authentication from Integrated to Basic.

Want to make sure that switching isn't going to effect anything else or just whether switching on basic in addition to integrated would help.

Did notice a warning when clicking on basic in addition saying

"The authentication method you have selected results in passwords being transmitted over the network without data encryption.  An intruder attempting to compromise your system security could use a protocol analyser to examine user passwords during the authentication process"

(in reply to stuarta)
Post #: 16
RE: Tool for internet usage monitoring - 4.Sep.2008 8:57:04 AM   
tshinder

 

Posts: 47439
Joined: 10.Jan.2001
From: Texas
Status: offline
That's true. Basic credentials are sent in the clear, which means anyone with a network sniffer will be able to read them.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to stuarta)
Post #: 17
RE: Tool for internet usage monitoring - 4.Sep.2008 8:59:16 AM   
stuarta

 

Posts: 25
Joined: 4.Sep.2008
Status: offline
ok thanks.  So how can I ensure that all the users are authenticating in order to get internet access?  They are authenticating ok for activesync and OWA, but not general internet access.

(in reply to tshinder)
Post #: 18
RE: Tool for internet usage monitoring - 4.Sep.2008 10:49:16 AM   
paulo.oliveira

 

Posts: 792
Joined: 3.Jan.2008
From: Amazonas, Brazil
Status: offline
Hi,

first your users/machines must be on the same domain as ISA server. After that, you have to make sure that your users are logging into their machines using the domain accounts.
If all these requirements are OK, then it should work.

Regards,
Paulo Oliveira.

(in reply to stuarta)
Post #: 19
RE: Tool for internet usage monitoring - 4.Sep.2008 11:02:48 AM   
stuarta

 

Posts: 25
Joined: 4.Sep.2008
Status: offline
yep, I can put a tick in all of those boxes.  All machines are on the same domain, and on the same network

(in reply to paulo.oliveira)
Post #: 20

Page:   [1] 2   next >   >> << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 General] >> General >> Tool for internet usage monitoring Page: [1] 2   next >   >>
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts