Hi I allowed all users, but i am getting for particular user not all users, when I will prepare any reports or when I am checking logging details than I am not able to see what URL they are browsing, it only showing the IP address, but it is not like for other users, I can see other Users browsing URL details.
We are getting the same problem, we have the firewall client set up on all workstations, IE is configured to not go though a proxy or use any autoconfig scripts, as we have problems with quicktime plugin streaming etc when IE is configured for a proxy server, we let everything go though the firewall client.
However we just started noticing that all requests logged though the server are IP's not domain names, this causes us big problems as it seems that our websense does not pick up these requests as web proxy requests and filter them,
below is a sample from our log.
Original Client IP Client Agent Authenticated Client Service Server Name Referring Server Destination Host Name Transport MIME Type Object Source Source Proxy Destination Proxy Bidirectional Client Host Name Filter Information Network Interface Raw IP Header Raw Payload Source Port Processing Time Bytes Sent Bytes Received Result Code HTTP Status Code Cache Information Error Information Log Record Type Log Time Destination IP Destination Port Protocol Action Rule Client IP Client Username Source Network Destination Network HTTP Method URL
0.0.0.0 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.1) Yes Proxy ISASERVER 220.127.116.11 TCP Internet - - - - - - 0 140 4177 491 200 0x60020000 0x500 Web Proxy Filter 09/11/2006 10:45:55 18.104.22.168 80 http Allowed Connection HTTP and HTTPS Proxy Access - Staff 10.0.100.83 COLCHESTER\HollockA Internal External GET http://22.214.171.124/
We resolved that problem, In client side you have to reconfigure the ISA firewall client once again, mean connect your ISA server, and update the proxy settings also, after that if you are using firefox browser than import the settings from IE browser. Than you can get domain name in loggings.
Did you figure out the issue? We have a similar case here that we want to only set the client to use the ISA server's IP as the gateway without setting the proxy inside the browser. But both the log shows the IP only instead of hostname, and the WebSense seems not working to block the selected sites.