Better reports what users browsed what websites (Full Version)

All Forums >> [ISA Server 2004 Firewall] >> Logging and Reporting



Message

conna -> Better reports what users browsed what websites (7.May2007 1:16:14 PM)

Why is the report generated nightly/monthly/whenever lacking the most important feature? 

The ability to show what users browsed what websites. 

Am I just missing the article or is this feature purposely left out to give other companies (GFI comes to mind) a reason to charge for this?

The query tool used and exported to excel is useful for the person who manages ISA but the users/managers that barely can figure out how email works, it’s just not useful.  Not to mention they need to run it on the actual ISA server.

The perfect addition to the nightly report would be a link for each user on the left that you could click and it would show the websites that user requested and the time. 

Yes it is handy to click the top users in the report and see who is using the most bandwidth but it should be taken a step further and give the ability to see what they are browsing. 

Has someone figured out how to get the report to show the list of websites per user without using third party software?

Am I the only one who would find this usefull?



systemlock -> RE: Better reports what users browsed what websites (21.May2007 10:47:07 AM)

My company wants the very same thing, has someone managed to look at this and find a solution? [&:]

Thx...



wishfly -> RE: Better reports what users browsed what websites (27.May2007 3:33:50 AM)

netfee for isa server
http://www.netfeesoftware.com



hasan -> RE: Better reports what users browsed what websites (13.Jun.2007 1:33:31 PM)

Hi
I need this too.Is any free solution available?



russellb -> RE: Better reports what users browsed what websites (14.Jun.2007 5:53:46 AM)

Hi, im fairly new to all of this and wish to monitor which users are looking at which websites. I have followed the guide to setting this up and it seems to be working fine but i think i may have missed something as its loggin all of the users as anonymous?

Has anyone else had this problem or have i simply missed something?



elmajdal -> RE: Better reports what users browsed what websites (14.Jun.2007 5:58:59 AM)

quote:

i may have missed something as its loggin all of the users as anonymous?


If you require authentication, then you would have your usernames logged in the reports.

authentication is forced, if you set your clients as Web Proxy AND/OR Firewall Clients and Set the condition in your Rules to be based on users or groups from your AD.


HTH,
Tarek



russellb -> RE: Better reports what users browsed what websites (14.Jun.2007 6:08:42 AM)

Excuse my ignorance but i am unsure what you mean, as i say i am new to this and have simply followed the guide word for word in setting this up.



elmajdal -> RE: Better reports what users browsed what websites (14.Jun.2007 6:12:53 AM)

1- post a snap shot of what rules you have on your ISA Server

2- what have you done on your clients , so that they communicate with ISA Server ? set default gateway, proxy, installed firewall client ??




russellb -> RE: Better reports what users browsed what websites (14.Jun.2007 6:37:45 AM)

On client computers default gateway has been set, proxy has been set and they are all setup as firewall clients

[image]http://i17.photobucket.com/albums/b97/russellbain/isa3.jpg[/image]
[image]http://i17.photobucket.com/albums/b97/russellbain/isa2.jpg[/image]

[image]http://i17.photobucket.com/albums/b97/russellbain/isa1.jpg[/image]

Sorry about the big images, i will remove them after this issue has been resolved



elmajdal -> RE: Better reports what users browsed what websites (14.Jun.2007 8:51:35 AM)

in your Firewall client software, how do u detect ISA Server ? manually or automatic ?

[image]http://i17.photobucket.com/albums/b97/russellbain/isa3.jpg[/image] 


and why you have both authentications set ??

do u need basic authentication ? if not remove it .

[image]http://i17.photobucket.com/albums/b97/russellbain/isa2.jpg[/image]



i need a snapshot of your rules
quote:

1- post a snap shot of what rules you have on your ISA Server






russellb -> RE: Better reports what users browsed what websites (19.Jun.2007 9:57:22 AM)

Ok, after playing around with this over the weekend i have managed to get it to log the details that i want. I have one more question though.

The logs are stored in the directory i chose as .mdf and .ldf files, i know this has probably been asked before but how exactly do i view these files. I want to be able to logon at the end of the day and check what the users have been looking at throughout the day

Thanks



elmajdal -> RE: Better reports what users browsed what websites (19.Jun.2007 10:15:04 AM)

quote:

The logs are stored in the directory i chose as .mdf and .ldf files, i know this has probably been asked before but how exactly do i view these files. I want to be able to logon at the end of the day and check what the users have been looking at throughout the day



Check this : http://www.elmajdal.net/isaserver/Creating_Detailed_Report_With_ISA_2006.aspx


also if u want , there is a tool on microsoft isa server site that u can use to convert these logs from msde format to text file : http://www.microsoft.com/downloads/details.aspx?FamilyID=a60a09a0-e4ad-47c7-9961-5e22e65ca986&DisplayLang=en



HTH,
Tarek



richardtracy -> RE: Better reports what users browsed what websites (2.Jul.2007 1:53:57 PM)

Hello all, my issue is like the others.  I would like to log user access to the internet, but since I have contractors that we do not setup accounts in our domain but do allow internet access we have to setup the access rule to allow any access to the internet.  Is there anyway in ISA 2004 to log user access and still allow anonymous access

Thank you,



elmajdal -> RE: Better reports what users browsed what websites (2.Jul.2007 4:34:00 PM)

SecureNET Clients can not authenticate, therefore you will not be able to log usernames in ISA Reports if you are using SecureNet alone.

You Will be able to log usernames in the reports if you set your Users AS Web Proxy and/or Firewall Clients.

one question comes to my mind, is all your LAN based on contractors ??



richardtracy -> RE: Better reports what users browsed what websites (3.Jul.2007 9:12:39 AM)

No most of our LAN are regular users, but we do have contractors on the network that we do not setup with domain accounts.  We do get the IP addresses of the workstation which allows us to track by workstation, but we have Citrix users which we cannot track by ip address.  Any ideas how we can get around this

Thank you for your help



elmajdal -> RE: Better reports what users browsed what websites (3.Jul.2007 9:33:41 AM)

U can keep your contractors as SecureNet ( no authentication ) and keep authentication for your other users

basically what u need to do is create 2 different rules.

1 without authentication for the set of IPs of the Contractors

ex. Allow > Protocols > From Contractors_IP > To External > All Users


and the 2nd rule for your domain users

Allow > Protocols > From Internal > To External > AD Users

check this : http://www.isaserver.org/articles/ISA2004_AccessRules.html
to understand how rules are processed in ISA 2004/2006



Page: [1]