• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Blocked site appear in the User Activity Report

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [Threat Management Gateway (TMG) 2010] >> General >> Blocked site appear in the User Activity Report Page: [1]
Login
Message << Older Topic   Newer Topic >>
Blocked site appear in the User Activity Report - 28.Nov.2011 6:59:58 AM   
nkbg

 

Posts: 19
Joined: 24.Aug.2010
Status: offline
Hello Everyone,

I have a firewall rule that blocks the traffic to facebook.com domain and it works, appears OK for the user in the Traffic Simulator and also the user can't access the site in practice :)

Anyhow, when I generate a User Activity report, it still show some traffic from www.facebook.com and the management is asking "Why is there any traffic there if we blocked the access".

Can anyone advise if this activity is normal?

THANK YOU,
Nikola
Post #: 1
RE: Blocked site appear in the User Activity Report - 28.Nov.2011 9:03:42 AM   
dvizzle

 

Posts: 236
Joined: 20.Apr.2009
Status: offline
Does your block rule specify:

*.facebook.com as well as facebook.com

As mentioned before in other threads, TMG treats them as 2 separate domains, and thus any rules should include both forms of the URL.

(in reply to nkbg)
Post #: 2

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [Threat Management Gateway (TMG) 2010] >> General >> Blocked site appear in the User Activity Report Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts