RE: Internet Usage Reports



Hi Steven,

Thanks for your update.

There is no other application on the SBS server box that can monitor
internet activities as your needs rather than ISA server. I would suggest
that you install ISA server on the server box.

Microsoft Internet Security and Acceleration (ISA) Server 2004 is the
advanced stateful packet and application-layer inspection firewall, virtual
private network (VPN), and Web cache solution that enables enterprise
customers to easily maximize existing information technology (IT)
investments by improving network security and performance. It is good
choice to upgrade your SBS 2003 standard version to premium edition, here
including ISA server and SQL server 2000.

For more detail information, you can visit the ISA server homepage.
http://www.microsoft.com/isaserver/default.mspx

867483 How to configure networks in ISA Server 2004
http://support.microsoft.com/?id=867483

Windows Small Business Server 2003: Frequently Asked Questions
http://www.microsoft.com/windowsserver2003/sbs/techinfo/overview/generalfaq.
mspx

Frequently Asked Questions About Windows Small Business Server 2003
Licensing.
http://www.microsoft.com/windowsserver2003/sbs/techinfo/overview/licensingfa
q.mspx

If you do not want to install ISA, there are some third party applications
can meet your needs. For your convenience, I list two for your reference.

Internet Access Monitor Software
http://www.microsoft.com/isaserver/default.mspx

Internet Access Monitor for Proxy+ 3.0
http://www.freedownloadscenter.com/Utilities/Misc__Utilities/Internet_Access
_Monitor_for_Proxy_.html

NOTE: This response contains a reference to a third party World Wide Web
site. Microsoft is providing this information as a convenience to you.
Microsoft does not control these sites and has not tested any software or
information found on these sites; therefore, Microsoft cannot make any
representations regarding the quality, safety, or suitability of any
software or information found there. There are inherent dangers in the use
of any software found on the Internet, and Microsoft cautions you to make
sure that you completely understand the risk before retrieving any software
from the Internet.

Hope above information helps!

Have a nice day!

Sincerely,

Jenny Wu
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
Thread-Topic: Internet Usage Reports
thread-index: AcY9qB3LMUTUW9lCQsuL9tiACkeorg==
X-WBNR-Posting-Host: 66.121.170.122
From: "=?Utf-8?B?U3RldmVuQg==?=" <StevenB@xxxxxxxxxxxxxxxxxxxxxxxxx>
References: <69B8AAE9-D98D-446D-BB0F-A040FC82D9FC@xxxxxxxxxxxxx>
<yuQlUg4MGHA.2072@xxxxxxxxxxxxxxxxxxxxx>
<75C648A9-951F-4236-82F4-A68343E5A76B@xxxxxxxxxxxxx>
<H9uwyCTPGHA.6536@xxxxxxxxxxxxxxxxxxxxx>
Subject: RE: Internet Usage Reports
Date: Wed, 1 Mar 2006 19:19:29 -0800
Lines: 309
Message-ID: <6FC4EC25-103E-4BCB-A025-2040B99E4391@xxxxxxxxxxxxx>
MIME-Version: 1.0
Content-Type: text/plain;
charset="Utf-8"
Content-Transfer-Encoding: 7bit
X-Newsreader: Microsoft CDO for Windows 2000
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
Newsgroups: microsoft.public.windows.server.sbs
Path: TK2MSFTNGXA03.phx.gbl
Xref: TK2MSFTNGXA03.phx.gbl microsoft.public.windows.server.sbs:248630
NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
X-Tomcat-NG: microsoft.public.windows.server.sbs

Hi Jenny,
I have SBS 2003 without ISA installed. Is there a similar solution for
this
configuration? My customer wants to monitor what web site his employees
are
visiting. Thanks for this geat forum!

StevenB

""Jenny wu [MSFT]"" wrote:

Hi,

Thanks for posting back.

To monitor the detail information, we need to check the IIS log or ISA
log.
There is not report to show the usage.

You can monitor remote users access your internal web sites information
from IIS log. Please follow below steps to enable IIS log and check it:

a. Open IIS MMC, right click Default Web Site and then click Properties.
b. Click Website tab and then check Enable logging.
c. Stop the Default Website and rename the existing IIS log files under
C:\WINDOWS\system32\LogFiles.
d. Restart the Default Website.

If you have installed ISA on the SBS server box, you can monitor the
activity using ISA logs.

Enable the full Web Proxy/firewall logging option:
a. Open ISA 2004 management console.
b. Expand the server node and highlight ''Monitoring''.
c. In the right pane, switch to the ''Logging'' tab, make sure the
''Task
Pane'' is showed there.
d. In the ''Task Pane'', click ''Configure Web Proxy Logging'' under
''Logging Tasks'', and then switch the ''log storage format'' from
''MSDE
database'' (default) to ''File''.
e. Switch to the ''Fields'' tab, and then click ''Select All''.
f. Click OK, and then click ''Apply'' to save changes and update the
configuration.
g. Click ''Configure Firewall Logging''. Do step d~f to enable the full
logging options for firewall logging.

By default, the logs will be saved to ''C:\Program Files\Microsoft ISA
Server\ISALogs''.

Additional, for ISAlogs files are in plaintext and it is indeed hard to
read. You can store Microsoft Internet Security and Acceleration (ISA)
Server logs to an ODBC database. The ISA Server CD-ROM includes the
following sample scripts:

1. Pf.sql defines the packet filter log table called PacketFilterLog.
2. W3PROXY.sql defines the Web Proxy service log table called
WebProxyLog.
3. FWSRV.sql defines the Firewall service log table called FirewallLog

Scripts for use with SQL Server are located in a folder on the ISA
Server
CD-ROM:
Systemroot\ISA\Database table creation scripts\SQL Server

Scripts for use with Access are located in another folder on the ISA
Server
CD-ROM.
Systemroot\ISA\Database table creation scripts\Access

You can use these files to create your own log database. For example,
perform the following steps to create an Access or SQL Server database
file:

1. Open the database application.
2. Create a new query.
3. Paste in the text from the applicable database file.
4. Run the query to create the table.

After you create the table, you must set up the ISA Server computer to
use
the data source name. Perform the following steps:

1. On the ISA Server computer, click Start, point to Programs, point to
Administrative Tools, and then click Data Sources (ODBC).
2. On the System DSN tab, click Add.
3. In the Create New Data Source, select the appropriate driver for the
database.
4. Follow the on-screen instructions to create the database.
The data source name is the ODBC data source (DSN) that you use when you
configure the log database properties.

To configure logging to a database:

1. Go to Internet Security and Acceleration Server\Servers and
Arrays\Name\Monitoring Configuration\Logs
2. In the details pane, right-click the applicable service and then
click
Properties.
3. On the Log tab, click Database.
4. Confirm or modify the following parameters:
ODBC data source (DSN)
Table name
User account
5. (Optional) If you need to change the user account, click Set Account,
type the user name in User, and type the password in Password and
Confirm
password.

You can then use query the SQL database by SELECT command (a SQL
command)
to get any info you are looking for.

Suggestion 2:
================
There is a tool may be helpful:
http://www.isaserver.org/news/Free_ISA_Server_Log_Analysis_Program.html
http://www.mela.de/Unix/log.html

NOTE: This response contains a reference to a third party World Wide Web
site. Microsoft is providing this information as a convenience to you.
Microsoft does not control these sites and has not tested any software
or
information found on these sites; therefore, Microsoft cannot make any
representations regarding the quality, safety, or suitability of any
software or information found there. There are inherent dangers in the
use
of any software found on the Internet, and Microsoft cautions you to
make
sure that you completely understand the risk before retrieving any
software
from the Internet.

Hope above information helps. Please let me know if you have further
question on the issue.

Have a nice day!

Sincerely,

Jenny Wu
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the
corresponding
newsgroups so that they can be resolved in an efficient and timely
manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check
the
"Notify me of replies" box to receive e-mail notifications when there
are
any updates in your thread. When responding to posts via your
newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In
doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly.
Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no
rights.

--------------------
Thread-Topic: Internet Usage Reports
thread-index: AcY8x1ZIyQCBHSNyRtKZYkYek61GpQ==
X-WBNR-Posting-Host: 69.242.136.151
From: "=?Utf-8?B?VHJpY2lhV2ViYg==?=" <triciawebb@xxxxxxxxxxx>
References: <69B8AAE9-D98D-446D-BB0F-A040FC82D9FC@xxxxxxxxxxxxx>
<yuQlUg4MGHA.2072@xxxxxxxxxxxxxxxxxxxxx>
Subject: RE: Internet Usage Reports
Date: Tue, 28 Feb 2006 16:30:27 -0800
Lines: 122
Message-ID: <75C648A9-951F-4236-82F4-A68343E5A76B@xxxxxxxxxxxxx>
MIME-Version: 1.0
Content-Type: text/plain;
charset="Utf-8"
Content-Transfer-Encoding: 7bit
X-Newsreader: Microsoft CDO for Windows 2000
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
Newsgroups: microsoft.public.windows.server.sbs
Path: TK2MSFTNGXA03.phx.gbl
Xref: TK2MSFTNGXA03.phx.gbl microsoft.public.windows.server.sbs:248278
NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
X-Tomcat-NG: microsoft.public.windows.server.sbs

What I was needing was a report that tells me what specific websites
each
user is going to. Is there a way to generate that type of report?

""Jenny wu [MSFT]"" wrote:

Hi,

Thanks for using the SBS newsgroup.

From your description, I understand that you want to monitor internet
usage
of users. If I am off base, please don't hesitate to let me know.

In SBS 2003 environment, the Monitoring and Reporting component
provides
function to monitor Internet activity. The usage information for
internet
activity is contained in the server usage report. The information
includes:

-- Internet Activity Web Activity by Computer.
The total and average daily hours a client computer was connected to
the
Internet during the reporting period.

--Web Traffic by Hour.
The total and average daily number of connections made by all client
computers, by hour, during the reporting period.

*Note: If you use a router to access the Internet, usage information
for
Internet activity will not be included in the report. Because Windows
Small
Business Server 2003 is unable to monitor firewall statistics for
third-party devices.

Solution: Install a second network adapter on the computer running
Windows
Small Business Server 2003, and then enable the Routing and Remote
Access
service as the firewall on the server by using the Configure E-mail
and
Internet Connection Wizard.

Another scenario: using the Internet Security and Acceleration (ISA)
Server
firewall to access the Internet. After we install ISA on SBS server
box,
ISA will track the web access activity and the Server Usage Report
can
not
fetch that data again. So the usage report does not show the web
access
activity usage report is a normal behavior.

If we still want to be reported the web access activity information,
we
can
configure the Server Usage Report to send ISA logs.

To do that:

1. Open Server Management, and then click Monitoring and Reporting in
the
left pane.
2. In the right pane, click Change Server Status Report Settings.
3. Click to select Server Usage Report, and then click Edit.
4. Click Content tab, and then click Add button to add the ISA logs.
5. Follow the instruction to finish the Wizard.

Hope above information helps! I am happy to be assistance of you and
look
forward to your reply.

Have a nice day!
Have a nice day!

Sincerely,

Jenny Wu
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have
issues
regarding other Microsoft products, you'd better post in the
corresponding
newsgroups so that they can be resolved in an efficient and timely
manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you
check
the
"Notify me of replies" box to receive e-mail notifications when there
are
any updates in your thread. When responding to posts via your
newsreader,
please "Reply to Group" so that others may learn and benefit from
your
issue.

Microsoft engineers can only focus on one issue per thread. Although
we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In
doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly.
Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no
rights.

--------------------
Thread-Topic: Internet Usage Reports
thread-index: AcYzEJGdXTyrATXhTwqGhLPOwMLnYA==
X-WBNR-Posting-Host: 24.121.59.165
From: "=?Utf-8?B?VHJpY2lhV2ViYg==?=" <triciawebb@xxxxxxxxxxx>
Subject: Internet Usage Reports
Date: Thu, 16 Feb 2006 07:49:28 -0800
Lines: 7
Message-ID: <69B8AAE9-D98D-446D-BB0F-A040FC82D9FC@xxxxxxxxxxxxx>
MIME-Version: 1.0
Content-Type: text/plain;
charset="Utf-8"
Content-Transfer-Encoding: 7bit
X-Newsreader: Microsoft CDO for Windows 2000
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
Newsgroups: microsoft.public.windows.server.sbs
NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
Path:
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA03.phx.gbl
Xref: TK2MSFTNGXA01.phx.gbl
microsoft.public.windows.server.sbs:245004
X-Tomcat-NG: microsoft.public.windows.server.sbs

In Small Business Server 2003 is there a way to run a report of


.