[isalist] Re: [ISAserver.org Discussion List] Re: webchaining.

  • From: "Michael Ross" <mross@xxxxxxxxxxx>
  • To: <isalist@xxxxxxxxxxxxx>
  • Date: Tue, 28 Mar 2006 15:44:32 -0600

http://www.ISAserver.org
-------------------------------------------------------

Yes I think you're right. 
But, its another product to buy.
 

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Thomas W Shinder
Sent: Tuesday, March 28, 2006 3:37 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: [ISAserver.org Discussion List] Re: webchaining.

http://www.ISAserver.org
-------------------------------------------------------
  
You can still look at the branch office ISA firewalls logs. I think GFI
Web Mon works with text files.

Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls

 

> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Michael Ross
> Sent: Tuesday, March 28, 2006 3:26 PM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: [ISAserver.org Discussion List] Re: 
> webchaining.
> 
> http://www.ISAserver.org
> -------------------------------------------------------
>   
> The configuration took the password I entered, but apparantly I fat 
> fingered the password.
> So now that I have that working, id like to find a way to see real 
> time what sites those users are going to.
> Too bad you can't tail an mdf file.
>  
> 
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx]
> On Behalf Of Thomas W Shinder
> Sent: Tuesday, March 28, 2006 3:09 PM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: [ISAserver.org Discussion List] Re: 
> webchaining.
> 
> http://www.ISAserver.org
> -------------------------------------------------------
>   
> :)
> 
> What was it?
> 
> Thomas W Shinder, M.D.
> Site: www.isaserver.org
> Blog: http://blogs.isaserver.org/shinder/
> Book: http://tinyurl.com/3xqb7
> MVP -- ISA Firewalls
> 
>  
> 
> > -----Original Message-----
> > From: isalist-bounce@xxxxxxxxxxxxx
> > [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Michael Ross
> > Sent: Tuesday, March 28, 2006 2:25 PM
> > To: isalist@xxxxxxxxxxxxx
> > Subject: [isalist] Re: [ISAserver.org Discussion List] Re: 
> > webchaining.
> > 
> > http://www.ISAserver.org
> > -------------------------------------------------------
> >   
> > Ignore.. I figured it out.
> >  
> > 
> > -----Original Message-----
> > From: isalist-bounce@xxxxxxxxxxxxx
> > [mailto:isalist-bounce@xxxxxxxxxxxxx]
> > On Behalf Of Michael Ross
> > Sent: Tuesday, March 28, 2006 2:17 PM
> > To: isalist@xxxxxxxxxxxxx
> > Subject: [isalist] Re: [ISAserver.org Discussion List] Re: 
> > webchaining.
> > 
> > http://www.ISAserver.org
> > -------------------------------------------------------
> >   
> > Ok
> > Upstream proxy set to require auth (windows integrated) Downstream 
> > proxy set to require auth (basic and\or integrated)
> Webchain rule set
> > with a specific domain account for authenticating to upstream proxy 
> > (using
> > basic) I get prompted by the downstream proxy 3 times, then I get:
> > 
> >  Technical Information (for support personnel) Error Code: 
> 407 Proxy
> > Authentication Required. The ISA Server requires authorization to 
> > fulfill the request. Access to the Web Proxy service is denied.
> > (12209) IP Address: x.x.x.x
> > Date: 3/28/2006 8:08:36 PM
> > Server: server.domain.COM 
> > Source: proxy   
> > 
> > -----Original Message-----
> > From: isalist-bounce@xxxxxxxxxxxxx
> > [mailto:isalist-bounce@xxxxxxxxxxxxx]
> > On Behalf Of Thomas W Shinder
> > Sent: Tuesday, March 28, 2006 11:59 AM
> > To: isalist@xxxxxxxxxxxxx
> > Subject: [isalist] Re: [ISAserver.org Discussion List] Re: 
> > webchaining.
> > 
> > http://www.ISAserver.org
> > -------------------------------------------------------
> >   
> > No.
> > 
> > Thomas W Shinder, M.D.
> > Site: www.isaserver.org
> > Blog: http://blogs.isaserver.org/shinder/
> > Book: http://tinyurl.com/3xqb7
> > MVP -- ISA Firewalls
> > 
> >  
> > 
> > > -----Original Message-----
> > > From: isalist-bounce@xxxxxxxxxxxxx 
> > > [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Michael Ross
> > > Sent: Tuesday, March 28, 2006 11:44 AM
> > > To: isalist@xxxxxxxxxxxxx
> > > Subject: [isalist] Re: [ISAserver.org Discussion List] Re: 
> > > webchaining.
> > > 
> > > http://www.ISAserver.org
> > > -------------------------------------------------------
> > >   
> > > Will it still enter that data into the msde database? 
> > > 
> > > -----Original Message-----
> > > From: isalist-bounce@xxxxxxxxxxxxx 
> > > [mailto:isalist-bounce@xxxxxxxxxxxxx]
> > > On Behalf Of Thomas W Shinder
> > > Sent: Tuesday, March 28, 2006 11:28 AM
> > > To: isalist@xxxxxxxxxxxxx
> > > Subject: [isalist] Re: [ISAserver.org Discussion List] Re: 
> > > webchaining.
> > > 
> > > http://www.ISAserver.org
> > > -------------------------------------------------------
> > >   
> > > Hi Mike,
> > > Yes, you can do that. Change the logging format to .txt and then 
> > > uninstall the "Advanced Logging" by running the ISA add/remove 
> > > process.
> > > 
> > > Thomas W Shinder, M.D.
> > > Site: www.isaserver.org
> > > Blog: http://blogs.isaserver.org/shinder/
> > > Book: http://tinyurl.com/3xqb7
> > > MVP -- ISA Firewalls
> > > 
> > >  
> > > 
> > > > -----Original Message-----
> > > > From: isalist-bounce@xxxxxxxxxxxxx 
> > > > [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Michael Ross
> > > > Sent: Tuesday, March 28, 2006 11:15 AM
> > > > To: isalist@xxxxxxxxxxxxx
> > > > Subject: [isalist] Re: [ISAserver.org Discussion List] Re: 
> > > > webchaining.
> > > > 
> > > > http://www.ISAserver.org
> > > > -------------------------------------------------------
> > > >   
> > > > Here's what could help me out.
> > > > Can I enable the downstream proxy to log to a text file? If
> > > I do that,
> > > 
> > > > would nothing get saved in the MSDE database?
> > > > I could tail that txt file each day to watch where the
> users are
> > > > going.
> > > > 
> > > > -----Original Message-----
> > > > From: isalist-bounce@xxxxxxxxxxxxx 
> > > > [mailto:isalist-bounce@xxxxxxxxxxxxx]
> > > > On Behalf Of Thomas W Shinder
> > > > Sent: Tuesday, March 28, 2006 8:45 AM
> > > > To: isalist@xxxxxxxxxxxxx
> > > > Subject: [isalist] Re: [ISAserver.org Discussion List] Re: 
> > > > webchaining.
> > > > 
> > > > http://www.ISAserver.org
> > > > -------------------------------------------------------
> > > >   
> > > > Hi Mike,
> > > > 
> > > > Be careful. You need to configure the downstreams to use
> > a specific
> > > > account to auth to the upstream. The branch office users
> > > will not be
> > > > authing with the upstream. The branch office ISA firewall
> > > itself will
> > > > authenticating itself with the upstream -- the users won't.
> > > > 
> > > > Thomas W Shinder, M.D.
> > > > Site: www.isaserver.org
> > > > Blog: http://blogs.isaserver.org/shinder/
> > > > Book: http://tinyurl.com/3xqb7
> > > > MVP -- ISA Firewalls
> > > > 
> > > >  
> > > > 
> > > > > -----Original Message-----
> > > > > From: isalist-bounce@xxxxxxxxxxxxx 
> > > > > [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of
> Michael Ross
> > > > > Sent: Tuesday, March 28, 2006 8:41 AM
> > > > > To: isalist@xxxxxxxxxxxxx
> > > > > Subject: [isalist] Re: [ISAserver.org Discussion List] Re: 
> > > > > webchaining.
> > > > > 
> > > > > http://www.ISAserver.org
> > > > > -------------------------------------------------------
> > > > >   
> > > > > So, if I enable authentication at the upstream AND
> > > > downstream proxies,
> > > > 
> > > > > a user wont get prompted to authenticate over and over? 
> > > Ill give it
> > > > > shot now and let u know what happens.
> > > > > If it works, that would give me one way to back track to
> > > > the original
> > > > > IP\User
> > > > > 
> > > > > -----Original Message-----
> > > > > From: isalist-bounce@xxxxxxxxxxxxx 
> > > > > [mailto:isalist-bounce@xxxxxxxxxxxxx]
> > > > > On Behalf Of Thomas W Shinder
> > > > > Sent: Tuesday, March 28, 2006 8:38 AM
> > > > > To: isalist@xxxxxxxxxxxxx
> > > > > Subject: [isalist] Re: [ISAserver.org Discussion List] Re: 
> > > > > webchaining.
> > > > > 
> > > > > http://www.ISAserver.org
> > > > > -------------------------------------------------------
> > > > >   
> > > > > No, it shouldn't. At least it hasn't the last time I
> tested and
> > > > > deployed it.
> > > > > 
> > > > > Thomas W Shinder, M.D.
> > > > > Site: www.isaserver.org
> > > > > Blog: http://blogs.isaserver.org/shinder/
> > > > > Book: http://tinyurl.com/3xqb7 MVP -- ISA Firewalls
> > > > > 
> > > > >  
> > > > > 
> > > > > > -----Original Message-----
> > > > > > From: isalist-bounce@xxxxxxxxxxxxx 
> > > > > > [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of
> > Michael Ross
> > > > > > Sent: Tuesday, March 28, 2006 8:26 AM
> > > > > > To: isalist@xxxxxxxxxxxxx
> > > > > > Subject: [isalist] Re: [ISAserver.org Discussion List] Re: 
> > > > > > webchaining.
> > > > > > 
> > > > > > http://www.ISAserver.org
> > > > > > -------------------------------------------------------
> > > > > >   
> > > > > > Correct me if im wrong, but wont that cause multiple
> > > > authentication
> > > > > > boxes?
> > > > > >  
> > > > > > 
> > > > > > -----Original Message-----
> > > > > > From: isalist-bounce@xxxxxxxxxxxxx 
> > > > > > [mailto:isalist-bounce@xxxxxxxxxxxxx]
> > > > > > On Behalf Of Jim Harrison
> > > > > > Sent: Tuesday, March 28, 2006 8:18 AM
> > > > > > To: isalist@xxxxxxxxxxxxx
> > > > > > Subject: [isalist] Re: [ISAserver.org Discussion List] Re: 
> > > > > > webchaining.
> > > > > > 
> > > > > > http://www.ISAserver.org
> > > > > > -------------------------------------------------------
> > > > > >   
> > > > > > Here's a Q forya:
> > > > > > - why are you only authenticating on the upstream proxy?
> > > > > > You should *always* authenticate closest to the user /
> > > > > domain making
> > > > > > the request.
> > > > > > 
> > > > > > -----Original Message-----
> > > > > > From: isalist-bounce@xxxxxxxxxxxxx 
> > > > > > [mailto:isalist-bounce@xxxxxxxxxxxxx]
> > > > > > On Behalf Of Michael Ross
> > > > > > Sent: Tuesday, March 28, 2006 5:41 AM
> > > > > > To: isalist@xxxxxxxxxxxxx
> > > > > > Subject: [isalist] Re: [ISAserver.org Discussion List] Re: 
> > > > > > webchaining.
> > > > > > 
> > > > > > lets take this one step further.
> > > > > > on my upstream proxy, i see the logs rolling by, and i see
> > > > > usernames
> > > > > > and the IP address of the downstream proxy.
> > > > > > ok, so that is what it is.. however, when viewing the
> > > > > monitoring tab
> > > > > > on the downstream proxy, I only see 'anonymous' on
> > > every session.
> > > > > > How could one correlate those 'anonymouses' with the actual
> > > > > user ID in
> > > > > 
> > > > > > the event that you need to trace back web activity to a
> > > > > user\IPaddress
> > > > > 
> > > > > > combo?
> > > > > > i only have authentication required on the upstream proxy,
> > > > > otherwise,
> > > > > > the users get prompted over and over to authenticate to get
> > > > > out to the
> > > > > 
> > > > > > web.
> > > > > > 
> > > > > > ________________________________
> > > > > > 
> > > > > > From: isalist-bounce@xxxxxxxxxxxxx 
> > > > > > [mailto:isalist-bounce@xxxxxxxxxxxxx]
> > > > > > On Behalf Of Thomas W Shinder
> > > > > > Sent: Tuesday, March 21, 2006 3:36 PM
> > > > > > To: isalist@xxxxxxxxxxxxx
> > > > > > Subject: [ISAserver.org Discussion List] Re: webchaining.
> > > > > > 
> > > > > > 
> > > > > > Hi Mike,
> > > > > >  
> > > > > > Listen here little feller:
> > > > > >  
> > > > > > If the Web Proxy Filter handles the request, then the
> > source IP
> > > > > > address will always be the IP address of the ISA firewall.
> > > > > >  
> > > > > > I'll stand by that until I have a chance to test it, or Jim
> > > > > tells me
> > > > > > I'm wrong :)
> > > > > >  
> > > > > > Tom
> > > > > >  
> > > > > > Thomas W Shinder, M.D.
> > > > > > Site: www.isaserver.org <http://www.isaserver.org/>
> > > > > > Blog: http://blogs.isaserver.org/shinder/
> > > > > > Book: http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7>
> > > > > MVP -- ISA
> > > > > > Firewalls
> > > > > > 
> > > > > >  
> > > > > > 
> > > > > > 
> > > > > > ________________________________
> > > > > > 
> > > > > >     From: isalist-bounce@xxxxxxxxxxxxx 
> > > > > > [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of
> > Michael Ross
> > > > > >     Sent: Tuesday, March 21, 2006 3:18 PM
> > > > > >     To: isalist@xxxxxxxxxxxxx
> > > > > >     Subject: [ISAserver.org Discussion List] Re: 
> > > webchaining.
> > > > > >     
> > > > > >     
> > > > > >     on my upstream proxy, the before the firewall,
> > > its set to Route,
> > > > > not
> > > > > > NAT.
> > > > > >     if it was set to NAT, the upstream proxy's IP was shown.
> > > > > >     so, i was hoping my downstream would show the client IP
> > > > > > 
> > > > > > ________________________________
> > > > > > 
> > > > > >     From: isalist-bounce@xxxxxxxxxxxxx 
> > > > > > [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Thomas
> > > > W Shinder
> > > > > >     Sent: Tuesday, March 21, 2006 2:58 PM
> > > > > >     To: isalist@xxxxxxxxxxxxx
> > > > > >     Subject: [ISAserver.org Discussion List] Re: 
> > > webchaining.
> > > > > >     
> > > > > >     
> > > > > >     Yep, that is weird.
> > > > > >      
> > > > > >     Thomas W Shinder, M.D.
> > > > > >     Site: www.isaserver.org <http://www.isaserver.org/> 
> > > > > >     Blog: http://blogs.isaserver.org/shinder/
> > > > > >     Book: http://tinyurl.com/3xqb7
> > > <http://tinyurl.com/3xqb7>
> > > > > >     MVP -- ISA Firewalls
> > > > > > 
> > > > > >      
> > > > > > 
> > > > > > 
> > > > > > ________________________________
> > > > > > 
> > > > > >             From: isalist-bounce@xxxxxxxxxxxxx 
> > > > > > [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of
> > Michael Ross
> > > > > >             Sent: Tuesday, March 21, 2006 2:40 PM
> > > > > >             To: isalist@xxxxxxxxxxxxx
> > > > > >             Subject: [ISAserver.org Discussion List] Re:
> > > > > > webchaining.
> > > > > >             
> > > > > >             
> > > > > >             ya know i think its just odd.
> > > > > >             right now my upstream proxy sends the
> > > client IP to the
> > > > > firewall..
> > > > > > 
> > > > > > ________________________________
> > > > > > 
> > > > > >             From: isalist-bounce@xxxxxxxxxxxxx 
> > > > > > [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Thomas
> > > > W Shinder
> > > > > >             Sent: Tuesday, March 21, 2006 2:22 PM
> > > > > >             To: isalist@xxxxxxxxxxxxx
> > > > > >             Subject: [ISAserver.org Discussion List] Re:
> > > > > > webchaining.
> > > > > >             
> > > > > >             
> > > > > >             You can't have it both ways. If you
> > > want to use the
> > > > > local Web proxy,
> > > > > > you must accept the source IP address being that of the
> > > > > downstream ISA
> > > > > 
> > > > > > firewall.
> > > > > >              
> > > > > >             Thomas W Shinder, M.D.
> > > > > >             Site: www.isaserver.org
> > > <http://www.isaserver.org/>
> > > > > >             Blog: http://blogs.isaserver.org/shinder/
> > > > > >             Book: http://tinyurl.com/3xqb7
> > <http://tinyurl.com/3xqb7>
> > > > > >             MVP -- ISA Firewalls
> > > > > > 
> > > > > >              
> > > > > > 
> > > > > > 
> > > > > > ________________________________
> > > > > > 
> > > > > >                     From: isalist-bounce@xxxxxxxxxxxxx 
> > > > > > [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of
> > Michael Ross
> > > > > >                     Sent: Tuesday, March 21, 2006 2:18 PM
> > > > > >                     To: isalist@xxxxxxxxxxxxx
> > > > > >                     Subject: [ISAserver.org
> > > Discussion List] Re:
> > > > > > webchaining.
> > > > > >                     
> > > > > >                     
> > > > > >                     i want them to cache locally,
> > > but i want one
> > > > > place to watch the
> > > > > > activity
> > > > > > 
> > > > > > ________________________________
> > > > > > 
> > > > > >                     From: isalist-bounce@xxxxxxxxxxxxx 
> > > > > > [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Thomas
> > > > W Shinder
> > > > > >                     Sent: Tuesday, March 21, 2006 2:11 PM
> > > > > >                     To: isalist@xxxxxxxxxxxxx
> > > > > >                     Subject: [ISAserver.org
> > > Discussion List] Re:
> > > > > > webchaining.
> > > > > >                     
> > > > > >                     
> > > > > >                     What's the point of having them
> > > use the local
> > > > > proxy? Why not just
> > > > > > configure the clients to connect directly to the upstream
> > > > Web proxy
> > > > > > and bypass proxy on the destination server? Turn off Web
> > > > > proxy support
> > > > > 
> > > > > > on the downstream and away you go.
> > > > > >                      
> > > > > >                     Thomas W Shinder, M.D.
> > > > > >                     Site: www.isaserver.org
> > > > > > <http://www.isaserver.org/> 
> > > > > >                     Blog: 
> > > http://blogs.isaserver.org/shinder/
> > > > > >                     Book: http://tinyurl.com/3xqb7
> > <http://tinyurl.com/3xqb7>
> > > > > >                     MVP -- ISA Firewalls
> > > > > > 
> > > > > >                      
> > > > > > 
> > > > > > 
> > > > > > ________________________________
> > > > > > 
> > > > > >                             From: 
> > > isalist-bounce@xxxxxxxxxxxxx
> > > > > > [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of
> > Michael Ross
> > > > > >                             Sent: Tuesday, March
> > > 21, 2006 2:06 PM
> > > > > >                             To: isalist@xxxxxxxxxxxxx
> > > > > >                             Subject: [ISAserver.org
> > > Discussion List]
> > > > > > Re: webchaining.
> > > > > >                             
> > > > > >                             
> > > > > >                             so basically i have to
> > > setup something
> > > > > to tail what's being
> > > > > > entered into the MSDE database as the users hit the
> > web, right?
> > > > > > 
> > > > > > ________________________________
> > > > > > 
> > > > > >                             From: 
> > > isalist-bounce@xxxxxxxxxxxxx
> > > > > > [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Thomas
> > > > W Shinder
> > > > > >                             Sent: Tuesday, March
> > > 21, 2006 1:44 PM
> > > > > >                             To: isalist@xxxxxxxxxxxxx
> > > > > >                             Subject: [ISAserver.org
> > > Discussion List]
> > > > > > Re: webchaining.
> > > > > >                             
> > > > > >                             
> > > > > >                             Yes, but you won't have
> > > Web proxy
> > > > chaining. You need a ROUTE
> > > > > > Network Rule and no Web proxy
> > > > > services at
> > > > > > the downstream. I.e., no local caching.
> > > > > >                              
> > > > > >                             Thomas W Shinder, M.D.
> > > > > >                             Site: www.isaserver.org
> > > > > > <http://www.isaserver.org/> 
> > > > > >                             Blog:
> > > > > > http://blogs.isaserver.org/shinder/
> > > > > >                             Book: http://tinyurl.com/3xqb7
> > > <http://tinyurl.com/3xqb7>
> > > > > >                             MVP -- ISA Firewalls
> > > > > > 
> > > > > >                              
> > > > > > 
> > > > > > 
> > > > > > ________________________________
> > > > > > 
> > > > > >                                     From:
> > > > > > isalist-bounce@xxxxxxxxxxxxx
> > > > > [mailto:isalist-bounce@xxxxxxxxxxxxx] On
> > > > > > Behalf Of Michael Ross
> > > > > >                                     Sent: Tuesday,
> > > March 21, 2006
> > > > > > 12:04 PM
> > > > > >                                     To: 
> > > isalist@xxxxxxxxxxxxx
> > > > > >                                     Subject: [ISAserver.org
Discussion List] Re: 
> > > > > > webchaining.
> > > > > >                                     
> > > > > >                                     
> > > > > >                                     any way to have
> > > it log the IP
> > > address of the actual client on
> > > > > > the upstream ISA? it would make monitoring the
> > clients so much
> > > > > > easier.
> > > > > > 
> > > > > > ________________________________
> > > > > > 
> > > > > >                                     From:
> > > > > > isalist-bounce@xxxxxxxxxxxxx
> > > > > [mailto:isalist-bounce@xxxxxxxxxxxxx] On
> > > > > > Behalf Of Thomas W Shinder
> > > > > >                                     Sent: Tuesday,
> > > March 21, 2006
> > > > > > 11:49 AM
> > > > > >                                     To: 
> > > isalist@xxxxxxxxxxxxx
> > > > > >                                     Subject: [ISAserver.org
Discussion List] Re: 
> > > > > > webchaining.
> > > > > >                                     
> > > > > >                                     
> > > > > >                                     Hi Mike,
> > > > > >                                      
> > > > > >                                     That's expected
> > > and what's
> > > > > > supposed to happen.
> > > > > >                                      
> > > > > >                                     Thomas W Shinder, M.D.
> > > > > >                                     Site: www.isaserver.org
<http://www.isaserver.org/>
> > > > > >                                     Blog:
> > > > > > http://blogs.isaserver.org/shinder/
> > > > > >                                     Book: 
> > > http://tinyurl.com/3xqb7
> > > <http://tinyurl.com/3xqb7>
> > > > > >                                     MVP -- ISA Firewalls
> > > > > > 
> > > > > >                                      
> > > > > > 
> > > > > > 
> > > > > > ________________________________
> > > > > > 
> > > > > >                                             From:
> > > > > > isalist-bounce@xxxxxxxxxxxxx
> > > > > [mailto:isalist-bounce@xxxxxxxxxxxxx] On
> > > > > > Behalf Of Michael Ross
> > > > > >                                             Sent: 
> > > Tuesday, March 21,
> > > > > > 2006 11:38 AM
> > > > > >                                             To:
> > > > > > isalist@xxxxxxxxxxxxx
> > > > > >                                             
> > > Subject: [ISAserver.org
> > > > > > Discussion List] webchaining.
> > > > > >                                             
> > > > > >                                             
> > > > > >                                             Another
> > > question.
> > > > > > 
> > > > > >                                             When I
> > > watch my logs on
> > > > > > the upstream proxy, I see users coming thru with the IP
> > > > > address of the
> > > > > 
> > > > > > downstream proxy, not of the client they are on.
> > > > > > 
> > > > > >                                             Thoughts? 
> > > > > > 
> > > > > > 
> > > > > > All mail to and from this domain is GFI-scanned.
> > > > > > 
> > > > > > ------------------------------------------------------
> > > > > > List Archives: //www.freelists.org/archives/isalist/
> > > > > > ISA Server Newsletter: 
> > > > http://www.isaserver.org/pages/newsletter.asp
> > > > > > ISA Server Articles and Tutorials:
> > > > > > http://www.isaserver.org/articles_tutorials/
> > > > > > ISA Server Blogs: http://blogs.isaserver.org/
> > > > > > ------------------------------------------------------
> > > > > > Visit TechGenix.com for more information about our
> > other sites:
> > > > > > http://www.techgenix.com
> > > > > > ------------------------------------------------------
> > > > > > To unsubscribe visit
> > http://www.isaserver.org/pages/isalist.asp
> > > > > > Report abuse to listadmin@xxxxxxxxxxxxx
> > > > > > 
> > > > > > ------------------------------------------------------
> > > > > > List Archives: //www.freelists.org/archives/isalist/
> > > > > > ISA Server Newsletter: 
> > > > http://www.isaserver.org/pages/newsletter.asp
> > > > > > ISA Server Articles and Tutorials: 
> > > > > > http://www.isaserver.org/articles_tutorials/
> > > > > > ISA Server Blogs: http://blogs.isaserver.org/
> > > > > > ------------------------------------------------------
> > > > > > Visit TechGenix.com for more information about our
> > other sites:
> > > > > > http://www.techgenix.com
> > > > > > ------------------------------------------------------
> > > > > > To unsubscribe visit
> > http://www.isaserver.org/pages/isalist.asp
> > > > > > Report abuse to listadmin@xxxxxxxxxxxxx
> > > > > > 
> > > > > > 
> > > > > > 
> > > > > ------------------------------------------------------
> > > > > List Archives: //www.freelists.org/archives/isalist/
> > > > > ISA Server Newsletter: 
> > > http://www.isaserver.org/pages/newsletter.asp
> > > > > ISA Server Articles and Tutorials:
> > > > > http://www.isaserver.org/articles_tutorials/
> > > > > ISA Server Blogs: http://blogs.isaserver.org/
> > > > > ------------------------------------------------------
> > > > > Visit TechGenix.com for more information about our
> other sites:
> > > > > http://www.techgenix.com
> > > > > ------------------------------------------------------
> > > > > To unsubscribe visit
> http://www.isaserver.org/pages/isalist.asp
> > > > > Report abuse to listadmin@xxxxxxxxxxxxx
> > > > > 
> > > > > ------------------------------------------------------
> > > > > List Archives: //www.freelists.org/archives/isalist/
> > > > > ISA Server Newsletter: 
> > > http://www.isaserver.org/pages/newsletter.asp
> > > > > ISA Server Articles and Tutorials: 
> > > > > http://www.isaserver.org/articles_tutorials/
> > > > > ISA Server Blogs: http://blogs.isaserver.org/
> > > > > ------------------------------------------------------
> > > > > Visit TechGenix.com for more information about our
> other sites:
> > > > > http://www.techgenix.com
> > > > > ------------------------------------------------------
> > > > > To unsubscribe visit
> http://www.isaserver.org/pages/isalist.asp
> > > > > Report abuse to listadmin@xxxxxxxxxxxxx
> > > > > 
> > > > > 
> > > > > 
> > > > ------------------------------------------------------
> > > > List Archives: //www.freelists.org/archives/isalist/
> > > > ISA Server Newsletter: 
> > http://www.isaserver.org/pages/newsletter.asp
> > > > ISA Server Articles and Tutorials:
> > > > http://www.isaserver.org/articles_tutorials/
> > > > ISA Server Blogs: http://blogs.isaserver.org/
> > > > ------------------------------------------------------
> > > > Visit TechGenix.com for more information about our other sites:
> > > > http://www.techgenix.com
> > > > ------------------------------------------------------
> > > > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > > > Report abuse to listadmin@xxxxxxxxxxxxx
> > > > 
> > > > ------------------------------------------------------
> > > > List Archives: //www.freelists.org/archives/isalist/
> > > > ISA Server Newsletter: 
> > http://www.isaserver.org/pages/newsletter.asp
> > > > ISA Server Articles and Tutorials: 
> > > > http://www.isaserver.org/articles_tutorials/
> > > > ISA Server Blogs: http://blogs.isaserver.org/
> > > > ------------------------------------------------------
> > > > Visit TechGenix.com for more information about our other sites:
> > > > http://www.techgenix.com
> > > > ------------------------------------------------------
> > > > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > > > Report abuse to listadmin@xxxxxxxxxxxxx
> > > > 
> > > > 
> > > > 
> > > ------------------------------------------------------
> > > List Archives: //www.freelists.org/archives/isalist/
> > > ISA Server Newsletter: 
> http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server Articles and Tutorials:
> > > http://www.isaserver.org/articles_tutorials/
> > > ISA Server Blogs: http://blogs.isaserver.org/
> > > ------------------------------------------------------
> > > Visit TechGenix.com for more information about our other sites:
> > > http://www.techgenix.com
> > > ------------------------------------------------------
> > > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > > Report abuse to listadmin@xxxxxxxxxxxxx
> > > 
> > > ------------------------------------------------------
> > > List Archives: //www.freelists.org/archives/isalist/
> > > ISA Server Newsletter: 
> http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server Articles and Tutorials: 
> > > http://www.isaserver.org/articles_tutorials/
> > > ISA Server Blogs: http://blogs.isaserver.org/
> > > ------------------------------------------------------
> > > Visit TechGenix.com for more information about our other sites:
> > > http://www.techgenix.com
> > > ------------------------------------------------------
> > > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > > Report abuse to listadmin@xxxxxxxxxxxxx
> > > 
> > > 
> > > 
> > ------------------------------------------------------
> > List Archives: //www.freelists.org/archives/isalist/
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server Articles and Tutorials:
> > http://www.isaserver.org/articles_tutorials/
> > ISA Server Blogs: http://blogs.isaserver.org/
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > Report abuse to listadmin@xxxxxxxxxxxxx
> > 
> > ------------------------------------------------------
> > List Archives: //www.freelists.org/archives/isalist/
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server Articles and Tutorials:
> > http://www.isaserver.org/articles_tutorials/
> > ISA Server Blogs: http://blogs.isaserver.org/
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > Report abuse to listadmin@xxxxxxxxxxxxx
> > 
> > ------------------------------------------------------
> > List Archives: //www.freelists.org/archives/isalist/
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server Articles and Tutorials: 
> > http://www.isaserver.org/articles_tutorials/
> > ISA Server Blogs: http://blogs.isaserver.org/
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > Report abuse to listadmin@xxxxxxxxxxxxx
> > 
> > 
> > 
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials: 
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> 
> 
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx 

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx

Other related posts: