RE: Simple ISA 2004 questions

Tech-Archive recommends: Fix windows errors by optimizing your registry

Hello Kent,

Thank you for your update.

Based on my research, to generate reports to display users names instead of
IP addresses, I suggest we try to perform follow 2 steps:

1. Modify the Internet Access Rule

1) Please open the ISA management console, navigate to Firewall Policy, and
click "Firewall Policy"

2) In middle pane, find the rule which you allow internal users to access
Internet (if you ran CEICW before, the rule is SBS Internet Access Rule)

3) Double-click it and select Users tap, in the top box please remove all
users existed and add All Authenticated Users

4) Click Ok and click Apply button to save the configuration.

2. All internal clients should be firewall client or web proxy client. If
the clients are SecurNAT, the data from these clients will not log in ISA
report.

Hope these steps will give you some help.

Thanks and have a nice day!

Best regards,

Terence Liu(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Thread-Topic: Simple ISA 2004 questions
| thread-index: AccJHuADgEt18D45TVSEeIyn+VlFDQ==
| X-WBNR-Posting-Host: 71.115.15.76
| From: =?Utf-8?B?S2VudCBPeWVy?= <KentOyer@xxxxxxxxxxxxxxxxxxxxxxxxx>
| References: <8FCA7223-FFF1-46DA-9980-B684BBB81FF3@xxxxxxxxxxxxx>
<yhCjOb9BHHA.4020@xxxxxxxxxxxxxxxxxxxxx>
| Subject: RE: Simple ISA 2004 questions
| Date: Wed, 15 Nov 2006 17:31:01 -0800
| Lines: 192
| Message-ID: <DB34A845-39CB-4C38-A843-99D75330112A@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
| Newsgroups: microsoft.public.windows.server.sbs
| Path: TK2MSFTNGXA01.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:313059
| NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Ok thanks for the info. However, when I look at reports it only shows the
IP
| address of the client. How do I get it to show the username instead?
|
| Thanks,
| kent
|
| "Terence Liu [MSFT]" wrote:
|
| > Hello Kent,
| >
| > Thank you for posting here.
| >
| > For first question, I suggest you that automatically configure the
clients'
| > proxy settings by GPO. You'd better create a new GPO for IE proxy, but
not
| > modify an existing GPO.
| >
| > 1. Run "gpmc.msc" in SBS server, navigate to
| > Domains->YourServerName->MyBusiness->Computers->SBSComputers in Group
| > Policy Management.
| >
| > 2. Right-click SBSComputers select Create and Link a GPO Here
| >
| > 3. Input name of the GPO (i.e. IE proxy setting)
| >
| > 4. Right-click this new GPO IE proxy setting, select Edit.
| >
| > 5. In the opening Group Policy Object Editor console, navigate User
| > Configuration->Windows Settings->Internet Explorer
Maintenance->Connection
| >
| > 6. In the right pane, double-click Proxy Settings, tick Enable proxy
| > settings and input the address of proxy, then click OK.
| >
| > Then, I suggest that we try the following steps to make all clients
apply
| > this setting:
| >
| > Modify the Security Filtering for this GPO:
| >
| > 1. Run "gpmc.msc" in SBS server, navigate to the IE proxy setting GPO
in
| > Group Policy Management.
| >
| > 2. In the right pane, select Scope tap, you will find Security
Filtering
| > box.
| >
| > 3 Because the IE proxy group policy is depend on Users, please ensure
the
| > user accounts which you use to logon SBS server are not include in the
| > group that is in the Security Filtering list.
| >
| > 1) Create a new user group.
| >
| > 2) Add all users which you want to perform this proxy setting as the
member
| > of this new group. And ensure the user accounts which you use to logon
SBS
| > server are not including in this new group.
| >
| > 3) Add this new group to IE proxy GPO Security Filtering list.
| >
| > For second question, ISA 2004 can give out Top Users by total traffic
load,
| > but ISA 2004 reporting function can't analyze the traffic coming from
| > individual user.
| >
| > As I know, ISA Server 2004 Query can give you some help. It gathers
| > real-time traffic via ISA and logs them. You may get the info your want
in
| > the query.
| > To edit and run ISA Server 2004 log queries, follow these steps:
| >
| > 1. Click Start, point to All Programs, point to Microsoft ISA Server,
and
| > then click ISA Server Management.
| >
| > 2. In the Microsoft Internet Security and Acceleration Server 2004
console,
| > expand YourServerName , and then click Monitoring.
| >
| > 3. In the center pane, click the Logging tab, right-click Log Record
Type,
| > and then click Edit Filter.
| >
| > Note By default, ISA Server 2004 includes the following two filter
queries.
| > However, you can customize the criteria of both queries to create
| > additional filter queries.
| > Log Record Type
| > Log Time
| >
| > 4. In the Edit Filter dialog box, click the Log Record Type entry, and
then
| > click the criteria that you want to filter by in each drop-down list.
| >
| > 5. Click the Log Time entry, and then click the criteria that you want
to
| > filter by in each drop-down list.
| >
| > 6. Click Update, and then click Start Query.
| >
| > In the center pane you will see Fetching Results appear while the query
| > runs. After the query has started, results are displayed in the center
| > pane. The results contain information about the most common network
| > features and about the results from the filter criteria that you have
set.
| > You can use this information to analyze the traffic from your computer
via
| > ISA server.
| >
| > In addition, some third party applications can analyze traffic on user
| > basis. For example, you can find an application GFI WebMonitor for ISA
| > Server from the following web page:
| >
| > http://www.isaserver.org/software/ISA/Monitoring-&-Admin/
| >
| > ==========================
| > This response contains a reference to a third party World Wide Web
site.
| > Microsoft can make no representation concerning the content of these
sites.
| > Microsoft is providing this information only as a convenience to you:
| > this is to inform you that Microsoft has not tested any software or
| > information found on these sites and therefore cannot make any
| > representations regarding the quality, safety, or suitability of any
| > software or information found there. There are inherent dangers in the
use
| > of any software found on the Internet, and Microsoft cautions you to
make
| > sure that you completely understand the risk before retrieving any
software
| > on the Internet.
| > ==========================
| > Hope above info helps.
| >
| > Thanks and have a nice day!
| >
| > Best regards,
| >
| > Terence Liu(MSFT)
| >
| > Microsoft CSS Online Newsgroup Support
| >
| > Get Secure! - www.microsoft.com/security
| >
| > =====================================================
| > This newsgroup only focuses on SBS technical issues. If you have issues
| > regarding other Microsoft products, you'd better post in the
corresponding
| > newsgroups so that they can be resolved in an efficient and timely
manner.
| > You can locate the newsgroup here:
| > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| >
| > When opening a new thread via the web interface, we recommend you check
the
| > "Notify me of replies" box to receive e-mail notifications when there
are
| > any updates in your thread. When responding to posts via your
newsreader,
| > please "Reply to Group" so that others may learn and benefit from your
| > issue.
| >
| > Microsoft engineers can only focus on one issue per thread. Although we
| > provide other information for your reference, we recommend you post
| > different incidents in different threads to keep the thread clean. In
doing
| > so, it will ensure your issues are resolved in a timely manner.
| >
| > For urgent issues, you may want to contact Microsoft CSS directly.
Please
| > check http://support.microsoft.com for regional support phone numbers.
| >
| > Any input or comments in this thread are highly appreciated.
| > =====================================================
| >
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| > --------------------
| > | Thread-Topic: Simple ISA 2004 questions
| > | thread-index: AccHNV8iYdn9QjciRee6CCWPLPPqow==
| > | X-WBNR-Posting-Host: 66.170.34.166
| > | From: =?Utf-8?B?S2VudCBPeWVy?= <KentOyer@xxxxxxxxxxxxxxxxxxxxxxxxx>
| > | Subject: Simple ISA 2004 questions
| > | Date: Mon, 13 Nov 2006 07:07:01 -0800
| > | Lines: 12
| > | Message-ID: <8FCA7223-FFF1-46DA-9980-B684BBB81FF3@xxxxxxxxxxxxx>
| > | MIME-Version: 1.0
| > | Content-Type: text/plain;
| > | charset="Utf-8"
| > | Content-Transfer-Encoding: 7bit
| > | X-Newsreader: Microsoft CDO for Windows 2000
| > | Content-Class: urn:content-classes:message
| > | Importance: normal
| > | Priority: normal
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
| > | Newsgroups: microsoft.public.windows.server.sbs
| > | Path: TK2MSFTNGXA01.phx.gbl
| > | Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:312256
| > | NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250
| > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > |
| > | I just installed ISA 2004 on a SBS 2003 box and it seems to be
working
| > OK. If
| > | I configure my browser to use the proxy server, I can connect to the
| > Internet
| > | fine. However, I have two questions:
| > |
| > | 1. How to I automatically configure the clients to use the proxy
| > settings?
| > |
| > | 2. How do I get reports to see who has been going to which sites? I
saw
| > | there is a "reports" tab in ISA 2004 but it's not very intuitive. I
would
| > | like to be able to view reports by date and by username.
| > |
| > | Thanks,
| > | Kent
| > |
| >
| >
|

.

Quantcast