Welcome to ISAserver.org

How to monitor ICQ activity on ISA 2004? (ICQ sniffer)

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> General >> How to monitor ICQ activity on ISA 2004? (ICQ sniffer)

Page: [1]

Message

<< Older Topic Newer Topic >>

How to monitor ICQ activity on ISA 2004? (ICQ sniffer) - 5.Jul.2006 8:29:01 AM

daniilkireev

Posts: 12
Joined: 10.Aug.2004
From: Moscow, Russia
Status: offline

We need to monitor messages our users send though ICQ (AIM, MSN etc.).

It seems that the best way to accomplish this is to install some kind of “ICQ filter” on ISA 2004 machine as the only Internet gateway in enterprise. Of cause it may be a stand alone application also.

Do you happen to know which software does this best? There are a lot but we don’t want just to test all of them.

Post #: 1

RE: How to monitor ICQ activity on ISA 2004? (ICQ sniffer) - 5.Jul.2006 4:31:10 PM

tshinder

Posts: 46637
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Daniil,

Both Websense and Akonix are good for this.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8
MVP -- ISA Firewalls

(in reply to daniilkireev)

Post #: 2

RE: How to monitor ICQ activity on ISA 2004? (ICQ sniffer) - 6.Jul.2006 6:06:53 PM

daniilkireev

Posts: 12
Joined: 10.Aug.2004
From: Moscow, Russia
Status: offline

Thanks Tom.

These programs are very “Corporate” and you must spend some time trying to make it work. If I have some time and a good reason to try them I’ll do it. Instead I just tried some not so powerful yet useful sniffers, they are:

1. ICQ Sniffer v1.1 (http://www.effetech.com)
2. Ufasoft ICQ Snif (www.ufasoft.com)
3. Shadow IM Sniffer (http://www.safety-lab.com)

My choice – Shodow IM Sniffer. It allows you to save log files into SQL database and it can work as a Windows service. There was a feature – after I installed it and before reboot my remote VPN clients could not connect to ISA 2004 machine, but when ISA was restarted everything was good.

ICQ Sniffer is the worst. I just could not start this program!

P.S. You know that your book was released in Russia in Russian? Design’s different but content is perfect! :)

(in reply to tshinder)

Post #: 3

RE: How to monitor ICQ activity on ISA 2004? (ICQ sniffer) - 9.Jul.2006 8:15:04 PM

tshinder

Posts: 46637
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Daniil,

Wow! I didn't know it was released in Russian! That's great

Thanks for the tips on ICQ sniffer. I'll check that out.

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8
MVP -- ISA Firewalls

(in reply to daniilkireev)

Post #: 4