Access through ISA Server
- From: "Johann Putter" <JohannP@xxxxxxxxxxxxx>
- To: <isalist@xxxxxxxxxxxxx>
- Date: Tue, 21 Oct 2003 13:20:34 +0200
Hi
We are running ISA server SP2& FP1 on Windows 2000 SP4 and all users
have to have authorisation to access the Internet. We have picked some
PC or users that seems to have access in spite of not being part of
groups that do allow access. This is an extract from the standard
summary ISA report:
No User Requests % of Total Requests Bytes In
% of Total Bytes In Bytes Out % of Total Bytes Out Total
Bytes % of Total Bytes
1 10.10.37.44 96049 16.50% 233.0 MB 11.10% 13.5 MB
6.40% 246.6 MB 10.70%
12 PRETORIA\mkhululix 47971 8.20% 0.0 B 0.00% 24.6 MB
11.70% 24.6 MB 1.10%
24 dionneb 139 0.00% 15.5 MB 0.70% 88.4 KB 0.00% 15.6 MB
0.70%
25 pretoria\charless 241 0.00% 15.2 MB 0.70% 139.5 KB
0.10% 15.3 MB 0.70%
All Others 380905 65.40% 1.2 GB 58.60% 143.1 MB
68.00% 1.3 GB 59.50%
Total 582683 100.00% 2.0 GB 100.00% 210.5 MB 100.00%
2.2 GB 100.00%
The extract leads to the following questions:
Why does the report show and IP address as a users?
Why, if this PC does not have the rights to access the Internet, does it
show traffic at all?
Why are some user indicated with their domain included and some not?
Why would users be able to use software like WSFTP although they are not
part of the group where these protocols are allowed?
Some explanations would be appreciated.
Johann Putter
===========
IS Manager
Africon
1040 Burnett Street
Hatfield
Tel: +27 12 427-2258
Fax: +27 12 427-2951
Cell: +27 82 553 8540
Web: www.africon.com
Other related posts:
