• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

logging reports showing only ip address not Domain names

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 Firewall] >> Firewall Client >> logging reports showing only ip address not Domain names Page: [1]
Login
Message << Older Topic   Newer Topic >>
logging reports showing only ip address not Domain names - 7.Nov.2006 1:35:19 AM   
dharamsale

 

Posts: 90
Joined: 9.Oct.2006
From: India
Status: offline
In my network some client (users) not showing the URL address, like www.yahoo.com itís showing only IP address, how to resolve this problem can any one help me

_____________________________

Santosh Dharamsale,
Network Administrator, MCSE, CCNA, PIX sam2002_2020@yahoo.com
Post #: 1
RE: logging reports showing only ip address not Domain ... - 7.Nov.2006 2:10:40 AM   
adgroup

 

Posts: 137
Joined: 11.May2006
Status: offline
did you allow ALL USERS in the firewall ? , If you enable ALL USERS then you will not be able to view usernames, INstead of ALL USERS use ALL AUTHENTICATED users.

Adgroup

(in reply to dharamsale)
Post #: 2
RE: logging reports showing only ip address not Domain ... - 8.Nov.2006 7:36:50 AM   
dharamsale

 

Posts: 90
Joined: 9.Oct.2006
From: India
Status: offline
Hi
I allowed all users, but i am getting for particular user not all users, when I will prepare any reports or when I am checking logging details than I am not able to see what URL they are browsing, it only showing the IP address, but it is not like for other users, I can see other Users browsing URL details.  

_____________________________

Santosh Dharamsale,
Network Administrator, MCSE, CCNA, PIX sam2002_2020@yahoo.com

(in reply to adgroup)
Post #: 3
RE: logging reports showing only ip address not Domain ... - 9.Nov.2006 5:51:00 AM   
chrisshearing

 

Posts: 1
Joined: 9.Nov.2006
Status: offline
Hi,

We are getting the same problem, we have the firewall client set up on all workstations, IE is configured to not go though a proxy or use any autoconfig scripts, as we have problems with quicktime plugin streaming etc when IE is configured for a proxy server, we let everything go though the firewall client.

However we just started noticing that all requests logged though the server are IP's not domain names, this causes us big problems as it seems that our websense does not pick up these requests as web proxy requests and filter them,

below is a sample from our log.


Original Client IP Client Agent Authenticated Client Service Server Name Referring Server Destination Host Name Transport MIME Type Object Source Source Proxy Destination Proxy Bidirectional Client Host Name Filter Information Network Interface Raw IP Header Raw Payload Source Port Processing Time Bytes Sent Bytes Received Result Code HTTP Status Code Cache Information Error Information Log Record Type Log Time Destination IP Destination Port Protocol Action Rule Client IP Client Username Source Network Destination Network HTTP Method URL

0.0.0.0 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.1) Yes Proxy ISASERVER  66.102.9.147 TCP  Internet - -  -  - - - 0 140 4177 491  200  0x60020000 0x500 Web Proxy Filter 09/11/2006 10:45:55 66.102.9.147 80 http Allowed Connection HTTP and HTTPS Proxy Access - Staff 10.0.100.83 COLCHESTER\HollockA Internal External GET http://66.102.9.147/

0.0.0.0 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.1) Yes Proxy ISASERVER  66.102.9.147 TCP  Cache - -  -  - - - 0 1 9093 391  0  0x0 0x80 Web Proxy Filter 09/11/2006 10:45:55 10.0.100.25 80 http Allowed Connection HTTP and HTTPS Proxy Access - Staff 10.0.100.83 COLCHESTER\HollockA Internal External GET http://66.102.9.147/intl/en_uk/images/logo.gif

any ideas ? :)

< Message edited by chrisshearing -- 9.Nov.2006 5:53:08 AM >

(in reply to dharamsale)
Post #: 4
RE: logging reports showing only ip address not Domain ... - 10.Nov.2006 10:35:09 PM   
dharamsale

 

Posts: 90
Joined: 9.Oct.2006
From: India
Status: offline
We resolved that problem,
In client side you have to reconfigure the ISA firewall client once again, mean connect your ISA server, and update the proxy settings also, after that if you are using firefox browser than import the settings from IE browser. Than you can get domain name in loggings.

_____________________________

Santosh Dharamsale,
Network Administrator, MCSE, CCNA, PIX sam2002_2020@yahoo.com

(in reply to chrisshearing)
Post #: 5
RE: logging reports showing only ip address not Domain ... - 20.Nov.2006 10:47:20 PM   
progzoom

 

Posts: 3
Joined: 20.Nov.2006
Status: offline
Hi chrisshearing,

Did you figure out the issue? We have a similar case here that we want to only set the client to use the ISA server's IP as the gateway without setting the proxy inside the browser. But both the log shows the IP only instead of hostname, and the WebSense seems not working to block the selected sites.

Thanks a lot!

(in reply to chrisshearing)
Post #: 6
RE: logging reports showing only ip address not Domain ... - 15.Mar.2007 8:03:56 AM   
elmajdal

 

Posts: 6022
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
Hi,
quote:

This freeware Web filter replaces host's IP-address by the hostname before logging at the URL-field (WebProxy logs).
Useful for SecureNAT and Firewall clients.


check this : Hostname Logger v 1.2 for ISA Server 
  

HTH,
Tarek


_____________________________

Tarek Majdalani

Windows Expert - IT Pro MVP
Facebook : https://www.facebook.com/ElMajdal.Net

(in reply to progzoom)
Post #: 7
RE: logging reports showing only ip address not Domain ... - 20.Apr.2007 8:28:10 AM   
@cbr1000

 

Posts: 12
Joined: 7.Feb.2007
Status: offline
The logging tool works great!.  Thanks

(in reply to elmajdal)
Post #: 8
RE: logging reports showing only ip address not Domain ... - 20.Apr.2007 8:34:17 AM   
elmajdal

 

Posts: 6022
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
Greate , Thanks

You may post also here : http://forums.isaserver.org/m_2002040128/mpage_1/key_/tm.htm#2002040477 in the HostLogger Thread so others read your testimony .

Thanks,
Tarek

_____________________________

Tarek Majdalani

Windows Expert - IT Pro MVP
Facebook : https://www.facebook.com/ElMajdal.Net

(in reply to @cbr1000)
Post #: 9
RE: logging reports showing only ip address not Domain ... - 8.May2010 2:47:27 AM   
raji85

 

Posts: 1
Joined: 8.May2010
Status: offline
Did you check your correct domain with your IP address? First of all you must check it out in here http://www.whoisxy.com/ @ free of costs.. Then you can get that what the problem is...

(in reply to dharamsale)
Post #: 10
RE: logging reports showing only ip address not Domain ... - 1.Apr.2013 9:41:28 PM   
alihassan

 

Posts: 1
Joined: 1.Apr.2013
Status: offline
it's not working with ISA 2004 SE
PLEASE HELP !!!

_____________________________

Aliz

(in reply to elmajdal)
Post #: 11
RE: logging reports showing only ip address not Domain ... - 13.Oct.2013 2:06:57 PM   
elmajdal

 

Posts: 6022
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
what is not working ?

_____________________________

Tarek Majdalani

Windows Expert - IT Pro MVP
Facebook : https://www.facebook.com/ElMajdal.Net

(in reply to alihassan)
Post #: 12

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 Firewall] >> Firewall Client >> logging reports showing only ip address not Domain names Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts