Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

why do log files contain some usernames and some clientip

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 Firewall] >> Logging and Reporting >> why do log files contain some usernames and some clientip Page: [1]
Login
Message << Older Topic   Newer Topic >>
why do log files contain some usernames and some clientip - 7.Nov.2005 7:59:00 PM   
kwhelan

 

Posts: 43
Joined: 30.Aug.2004
Status: offline
Im at a loss to explain why this happens but it makes user charging very difficult. My dailyreports and subsequently in the logs I have a mixture of some client usernames and some client ips.
This happens randomly eg a report of top 20 users will list 5-6 names and then the rest will be clientips

All machines are identical,same os, all firewall clients and webproxy set, all in same domain etc,ISA is a domain member all destination URLs are displaying properly in logs, DNS appears perfect
isa machine is new 2gig ram.System is not overloaded and occurs even at times of low loading but I get these random cases of client ips instead of username
Its not client dependant as same client can log either name or IP depending on the mood it seems to be in at the time.
this makes true charging impossible as at the end of a month I have up to 30% of charges logged to an IP which could have had any random user.
Please any help would be appreciated
Post #: 1
RE: why do log files contain some usernames and some cl... - 14.Nov.2005 4:18:33 PM   
tshinder

 

Posts: 47439
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi K,

IIRC, when you see an IP for machines configured as Firewall and Web proxy clients, then those are connections to the ISA firewall itself, not to an external site.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to kwhelan)
Post #: 2

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 Firewall] >> Logging and Reporting >> why do log files contain some usernames and some clientip Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts