RE: Demographics
- From: "Jim Harrison" <jim@xxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Thu, 31 Jul 2003 09:15:32 -0700
If you're using Web Publishing, Referrer is included IF the client request
includes that header.
You're right; ISA doesn't log anything related to cookies, because unless
you have a web filter that's doing something based on them, ISA just doesn't
care.
Regarding time sync for ISA, that's pretty simple; just create a packet
filter as:
Name = ISA Time Sync
Protocol = UDP
Direction = Send-Receive
Local port = any
Remote Port = 123
and set Windows to use your favorite time source.
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://www.microsoft.com/isaserver
http://isaserver.org/Jim_Harrison
http://isatools.org
Read the help, books and articles!
----- Original Message -----
From: "Stefano Peduzzi" <stefano.peduzzi@xxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Thursday, July 31, 2003 09:06
Subject: [isalist] RE: Demographics
http://www.ISAserver.org
I'm having the same problems too..
ISA logs don't have info on COOKIES and REFERRER URL that is the most
valuable info to me..
We developed some script to have an union between ISA and IIS logs but we're
having some troubles with time sync (I know it's my fault 'cause I never
managed to set up ISA properly to retrieve time from a time server and then
make it the internal time server... but it's difficult!).
Is there any doc that clarify the cache usage in ISA: I see some record in
ISA as INET, Cache, VCache and so on but I don't have clear ideas on what
they are.
Ciao,
Stefano
PS: please could you share the docs you sent to Tom and Jim. I'm interested
to see if I missed something!
----- Original Message -----
From: "Howard Griffith" <hgriffith@xxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Thursday, July 31, 2003 5:46 PM
Subject: [isalist] RE: Demographics
> http://www.ISAserver.org
>
>
> As for the log file fields that are missing, I've emailed the document our
> web guy typed up explaining what he doesn't get to Jim and Tom's email
> addresses.
>
> As for the tricking of the ISA server that's not really what we're doing.
> What we have setup is a publishing ISA server and an Egress ISA server.
The
> publishing ISA server is used for incoming requests for web, smtp, pop,
etc.
> and clients respond back through that ISA server for stateful connections,
> requests that initiate from an internet client. The Egress ISA server is
> used solely for any internally initiated client/server request to go out.
It
> requires some work to set this up but it works fairly well.
>
> Thanks,
> Howard
>
>
>
> -----Original Message-----
> From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
> Sent: Thursday, July 31, 2003 11:09 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Demographics
>
> http://www.ISAserver.org
>
>
> Hi Howard,
>
> What information is not being captured?
>
> Also, how to you trick the first ISA Server firewall to accept responses
> from the client when the second ISA Server firewall owns the session?
>
> Thanks!
> Tom
>
> Thomas W Shinder
> www.isaserver.org/shinder
> ISA Server and Beyond: http://tinyurl.com/1jq1
> Configuring ISA Server: http://tinyurl.com/1llp
>
>
>
>
> -----Original Message-----
> From: Howard Griffith [mailto:hgriffith@xxxxxxxxxx]
> Sent: Thursday, July 31, 2003 9:41 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] Demographics
>
>
> http://www.ISAserver.org
>
>
> I'm running into an issue with our ISA server deployment that I'm hoping
> someone else can give advice on. First let me say that I think ISA is a
> wonderful product.
>
> Our problem consists of the log file information provided by ISA. We use
> demographic info for our websites in some extensive manners, i.e., the
> client ip, referrer, time, search string, browser type, etc. Our problem
> is
> that ISA doesn't capture all this information for us. Whether using web
> publishing or server publishing, we're finding that we can't get all the
> info we need from the log files that ISA provides.
>
> Someone at this point may be saying, use server publishing and use the
> log
> file on the web server. Well, good point, but... that won't work. We
> have
> setup a dual path config using two ISA servers. One ISA server is for
> incoming traffic and the other is for outgoing traffic. We have the
> incoming
> ISA server setup with the server publishing reg hack so that the
> internal
> clients do NOT see the requesting internet IP address but instead see
> that
> ISA server as the client. We have to do this because of the fact that
> all
> outgoing internally initiated request go out another ISA server. There
> are
> more details but not relevant.
>
> Anyway, the short of it is, has anyone else run into this and/or has
> anyone
> found a work around for this. If we can't resolve this we can't use ISA
> to
> publish our internal web server and would have to then rethink our ISA
> implementation or discard it. We really don't want to do this but...
>
> TIA,
> Howard
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> tshinder@xxxxxxxxxxxxxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> isaserver.org@xxxxxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
stefano.peduzzi@xxxxxxxxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')
>
>
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
