[isalist] Re: Best way to track down issue from Generated Report?

  • From: "Jonathon J. Howey" <Jonathon@xxxxxxxx>
  • To: <isalist@xxxxxxxxxxxxx>
  • Date: Tue, 25 Jul 2006 16:19:32 -0600

If your "I'll reply again" was in regards to this thread, I did not
receive it then.
 
FW Client installed: Already was
 
SBS created (probably from ISA 2000 upgrade) a "SBS Internet Users"
group which all the rules use, so unless something is broken with that,
anonymous / "All Users" shouldn't be a problem...
 
Jonathon J. Howey
MENSE Inc.
P 780.409.5620
F 780.409.5621
D 780.409.5628
C 780.965.8363
Jonathon@xxxxxxxx
 
Defining the Future of Industry
www.MENSE.ca <http://www.mense.ca/> 
 
 
 

________________________________

From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Steve Moffat
Sent: July 25, 2006 2:39 PM
To: ISA Mailing List
Subject: [isalist] Re: Best way to track down issue from Generated
Report?



I'll reply again.

 

You need to install the FW client, disallow the anonymous requests,
create a user group within ISA and apply the user group to your internet
access rule.

 

S

 

From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Jonathon J. Howey
Sent: Tuesday, July 25, 2006 5:35 PM
To: ISA Mailing List
Subject: [isalist] Best way to track down issue from Generated Report?

 

Last try


 

________________________________

From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Jonathon J. Howey
Sent: July 17, 2006 11:11 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Best way to track down issue from Generated Report?

Hi,

 

For a 7-day period, the report is saying that one user downloaded 11.53
GB.  What's the best way to track down where this data came from, what
time, etc?  (ie which log, etc.)?  I tried using MS Log Parser, but all
the logs seem to have are wpad/wspad.dat lookups for the *.129 IP.

 

No User Requests % of Total Requests Bytes In % of Total Bytes In Bytes
Out % of Total Bytes Out Total Bytes % of Total Bytes 1 192.168.100.129
11756 1.70 % 11.53 GB 46.70 % 909.96 MB 5.90 % 12.41 GB 31.10 %

 

Thanks.

 

Jonathon J. Howey

MENSE Inc.

P 780.409.5620

F 780.409.5621

D 780.409.5628

C 780.965.8363

Jonathon@xxxxxxxx

 

Defining the Future of Industry

www.MENSE.ca <http://www.mense.ca/> 

 

 

 

Other related posts: