RE: How can I create a Remote Access Usage report for my 2003 SBS

Hi,

Thanks for your update. I am glad to know that information is useful to
you-)!

Regarding to your question: what program will allow me to read them?

Suggestion 1:
================
For ISAlogs files are in plaintext and it is indeed hard to read. You can
store Microsoft Internet Security and Acceleration (ISA) Server logs to an
ODBC database. The ISA Server CD-ROM includes the following sample scripts:

1. Pf.sql defines the packet filter log table called PacketFilterLog.
2. W3PROXY.sql defines the Web Proxy service log table called WebProxyLog.
3. FWSRV.sql defines the Firewall service log table called FirewallLog

Scripts for use with SQL Server are located in a folder on the ISA Server
CD-ROM:
Systemroot\ISA\Database table creation scripts\SQL Server

Scripts for use with Access are located in another folder on the ISA Server
CD-ROM.
Systemroot\ISA\Database table creation scripts\Access

You can use these files to create your own log database. For example,
perform the following steps to create an Access or SQL Server database file:

1. Open the database application.
2. Create a new query.
3. Paste in the text from the applicable database file.
4. Run the query to create the table.

After you create the table, you must set up the ISA Server computer to use
the data source name. Perform the following steps:

1. On the ISA Server computer, click Start, point to Programs, point to
Administrative Tools, and then click Data Sources (ODBC).
2. On the System DSN tab, click Add.
3. In the Create New Data Source, select the appropriate driver for the
database.
4. Follow the on-screen instructions to create the database.
The data source name is the ODBC data source (DSN) that you use when you
configure the log database properties.

To configure logging to a database:

1. Go to Internet Security and Acceleration Server\Servers and
Arrays\Name\Monitoring Configuration\Logs
2. In the details pane, right-click the applicable service and then click
Properties.
3. On the Log tab, click Database.
4. Confirm or modify the following parameters:
ODBC data source (DSN)
Table name
User account
5. (Optional) If you need to change the user account, click Set Account,
type the user name in User, and type the password in Password and Confirm
password.

You can then use query the SQL database by SELECT command (a SQL command)
to get any info you are looking for.

Suggestion 2:
================
There is a tool may be helpful:
http://www.isaserver.org/news/Free_ISA_Server_Log_Analysis_Program.html
http://www.mela.de/Unix/log.html

NOTE: This response contains a reference to a third party World Wide Web
site. Microsoft is providing this information as a convenience to you.
Microsoft does not control these sites and has not tested any software or
information found on these sites; therefore, Microsoft cannot make any
representations regarding the quality, safety, or suitability of any
software or information found there. There are inherent dangers in the use
of any software found on the Internet, and Microsoft cautions you to make
sure that you completely understand the risk before retrieving any software
from the Internet.

Hope above information helps! I am happy to be of assistance to you.

Have a nice day!

Sincerely,

Jenny Wu
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
Thread-Topic: How can I create a Remote Access Usage report for my 2003 SBS
thread-index: AcYxgJvpxnG+v8JfQkCwxRKR1C2pYw==
X-WBNR-Posting-Host: 70.88.41.33
From: "=?Utf-8?B?SVRNQU4=?=" <ITMAN@xxxxxxxxxxxxxxxxxxxxxxxxx>
References: <3CEDA00C-A6D2-402E-8A8C-C35DB2EFC450@xxxxxxxxxxxxx>
<o06OUGGMGHA.3052@xxxxxxxxxxxxxxxxxxxxx>
<BE2D2E6F-E1B0-45B9-877B-68EC7277A57C@xxxxxxxxxxxxx>
<Fs$b6$UMGHA.3052@xxxxxxxxxxxxxxxxxxxxx>
Subject: RE: How can I create a Remote Access Usage report for my 2003 SBS
Date: Tue, 14 Feb 2006 08:06:26 -0800
Lines: 262
Message-ID: <82DBCFD8-D537-48A0-BA52-F69F2499E34F@xxxxxxxxxxxxx>
MIME-Version: 1.0
Content-Type: text/plain;
charset="Utf-8"
Content-Transfer-Encoding: 7bit
X-Newsreader: Microsoft CDO for Windows 2000
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
Newsgroups: microsoft.public.windows.server.sbs
NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:244400
X-Tomcat-NG: microsoft.public.windows.server.sbs

Hi again,
The information you have provided me is very good. Now that I have
created
the logflies, (C:\Program Files\Microsoft ISA
Server\ISALogs)
what program will allow me to read them?

Thanks,
--
K.I.S.S.


""Jenny wu [MSFT]"" wrote:

Hi,

Thanks for your update.

To monitor remote users access internal web sites, we need to check the
IIS
log or ISA log to find the access date and time. There is not report to
show the usage.

You can monitor them from IIS log. Please follow below steps to enable
IIS
log and check it:

a. Open IIS MMC, right click Default Web Site and then click Properties.
b. Click Website tab and then check Enable logging.
c. Stop the Default Website and rename the existing IIS log files under
C:\WINDOWS\system32\LogFiles.
d. Restart the Default Website.

And also you can check the ISA log to monitor remote access:

Enable the full Web Proxy/firewall logging option:
a. Open ISA 2004 management console.
b. Expand the server node and highlight ''Monitoring''.
c. In the right pane, switch to the ''Logging'' tab, make sure the
''Task
Pane'' is showed there.
d. In the ''Task Pane'', click ''Configure Web Proxy Logging'' under
''Logging Tasks'', and then switch the ''log storage format'' from
''MSDE
database'' (default) to ''File''.
e. Switch to the ''Fields'' tab, and then click ''Select All''.
f. Click OK, and then click ''Apply'' to save changes and update the
configuration.
g. Click ''Configure Firewall Logging''. Do step d~f to enable the full
logging options for firewall logging.

By default, the logs will be saved to ''C:\Program Files\Microsoft ISA
Server\ISALogs''.

Hope above information helps!

Have a nice day!

Sincerely,

Jenny Wu
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the
corresponding
newsgroups so that they can be resolved in an efficient and timely
manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check
the
"Notify me of replies" box to receive e-mail notifications when there
are
any updates in your thread. When responding to posts via your
newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In
doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly.
Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no
rights.

--------------------
Thread-Topic: How can I create a Remote Access Usage report for my 2003
SBS
thread-index: AcYwq9wY2+D2NFvHRT6R4tmRliwc9Q==
X-WBNR-Posting-Host: 70.88.41.33
From: "=?Utf-8?B?SVRNQU4=?=" <ITMAN@xxxxxxxxxxxxxxxxxxxxxxxxx>
References: <3CEDA00C-A6D2-402E-8A8C-C35DB2EFC450@xxxxxxxxxxxxx>
<o06OUGGMGHA.3052@xxxxxxxxxxxxxxxxxxxxx>
Subject: RE: How can I create a Remote Access Usage report for my 2003
SBS
Date: Mon, 13 Feb 2006 06:43:31 -0800
Lines: 127
Message-ID: <BE2D2E6F-E1B0-45B9-877B-68EC7277A57C@xxxxxxxxxxxxx>
MIME-Version: 1.0
Content-Type: text/plain;
charset="Utf-8"
Content-Transfer-Encoding: 7bit
X-Newsreader: Microsoft CDO for Windows 2000
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
Newsgroups: microsoft.public.windows.server.sbs
NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:244119
X-Tomcat-NG: microsoft.public.windows.server.sbs

Hi Jenny,
Thanks for your prompt reply. I did not expect to receive an answer
this
quickly. The information you have provided is usefull, although I
should
have been more specific in my question. I am currently using ISA
Server
2004
running on my SBS 2003 Server. The specific report that I need to view
is
the user logs for the remote access to our Sharepoint Remote Web
Workplace.
I need to be able to list the specific users access usage to include
the
amount of time and actual date and time that they are logged in.
Currently
the Server Usage Report lists the Outlook Web Access usage by Hour and
the
Outlook Web Access Activity by User. I tried to follow the
instructions
that
you suggest but the logfiles for the activities I need do not show up
still.
Any Suggestions?

Thanks,
--
KISS


""Jenny wu [MSFT]"" wrote:

Hi,

Thanks for using the SBS newsgroup!

I am sorry for the delayed response due to weekend. Please understand
that
the newsgroups are staffed weekdays by Microsoft Support
professionals
to
answer your systems and applications questions. Your understanding is
greatly appreciated!

In SBS 2003 environment, the Monitoring and Reporting component
provides
function to monitor Internet activity. The usage information for
internet
activity is contained in the server usage report. The information
includes:

-- Internet Activity Web Activity by Computer.
The total and average daily hours a client computer was connected to
the
Internet during the reporting period.

--Web Traffic by Hour.
The total and average daily number of connections made by all client
computers, by hour, during the reporting period.

*Note: If you use a router to access the Internet, usage information
for
Internet activity will not be included in the report. Because Windows
Small
Business Server 2003 is unable to monitor firewall statistics for
third-party devices.

Solution: Install a second network adapter on the computer running
Windows
Small Business Server 2003, and then enable the Routing and Remote
Access
service as the firewall on the server by using the Configure E-mail
and
Internet Connection Wizard.

Another scenario: using the Internet Security and Acceleration (ISA)
Server
firewall to access the Internet. After we install ISA on SBS server
box,
ISA will track the web access activity and the Server Usage Report
can
not
fetch that data again. So the usage report does not show the web
access
activity usage report is a normal behavior.

If we still want to be reported the web access activity information,
we
can
configure the Server Usage Report to send ISA logs.

To do that:

1. Open Server Management, and then click Monitoring and Reporting in
the
left pane.
2. In the right pane, click Change Server Status Report Settings.
3. Click to select Server Usage Report, and then click Edit.
4. Click Content tab, and then click Add button to add the ISA logs.
5. Follow the instruction to finish the Wizard.

Hope above information helps! I am happy to be assistance of you and
look
forward to your reply.

Have a nice day!

Sincerely,

Jenny Wu
Microsoft CSS Online Newsgroup Support
======================================================

PLEASE NOTE the newsgroup SECURE CODE and PASSWORD will be updated at
9:00
AM PST, February 14, 2006. Please complete a re-registration process
by
entering the secure code mmpng2006 when prompted. Once you have
entered
the
secure code mmpng2006, you will be able to update your profile and
access
the partner newsgroups.

======================================================

When responding to posts, please "Reply to Group" via your newsreader
so
that others may learn and benefit from this issue.

======================================================

This posting is provided "AS IS" with no warranties, and confers no
rights.

======================================================

--------------------
Thread-Topic: How can I create a Remote Access Usage report for my
2003
SBS
thread-index: AcYufQ+zGGza2rDmSWqaRlCnSXWVFw==
X-WBNR-Posting-Host: 70.88.41.33
From: "=?Utf-8?B?SVRNQU4=?=" <ITMAN@xxxxxxxxxxxxxxxxxxxxxxxxx>
Subject: How can I create a Remote Access Usage report for my 2003
SBS
Date: Fri, 10 Feb 2006 12:03:29 -0800
Lines: 3
Message-ID: <3CEDA00C-A6D2-402E-8A8C-C35DB2EFC450@xxxxxxxxxxxxx>
MIME-Version: 1.0
Content-Type: text/plain;
charset="Utf-8"
Content-Transfer-Encoding: 7bit
X-Newsreader: Microsoft CDO for Windows 2000
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
Newsgroups: microsoft.public.windows.server.sbs
NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
Xref: TK2MSFTNGXA01.phx.gbl
microsoft.public.windows.server.sbs:243685
X-Tomcat-NG: microsoft.public.windows.server.sbs


--
KISS








.

Loading