RE: OT - ISA 2004 access rules yahoo/poker games

  • From: "Neil Cassidy" <ncassidy@xxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Tue, 7 Mar 2006 17:13:39 -0500

I can see it fine in the ISA console, I meant for you and others to be
better able to read it.  I already filtered the query by workstation, so
it is limited to that.
 
Can you elaborate on the authentication.  Does it not get that
automatically from the FWC/proxy server?
 
Thanks.

________________________________

From: Amy Babinchak [mailto:amy@xxxxxxxxxxxxxxxxxxxxxxxxxx] 
Sent: Tuesday, March 07, 2006 5:08 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: OT - ISA 2004 access rules yahoo/poker games


http://www.ISAserver.org


Neil,

 

If you highlight and the copy to clipboard the log information you
captured, then paste it into notepad you'll be able to see all of the
columns of information. They'll be about 20 of them. Save the notepad
doc as a .csv file and then use Excel to open it. Sort by Client IP.
You'll then be able to see everything that went from the workstation
through the firewall.

 

The SBS Internet Access rule requires authentication. This looks to be
the source of the problem from what you've posted so far.

 

Amy

 

Harbor Computer Services

Small Business Computer Specialists

 

 

Client Blog: http://smalltechnotes.blogspot.com/

Tech Blog: http://isainsbs.blogspot.com/

Website: http://www.harborcomputerservices.net/

 

________________________________

From: Neil Cassidy [mailto:ncassidy@xxxxxxxxxxxxx] 
Sent: Tuesday, March 07, 2006 3:58 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: OT - ISA 2004 access rules yahoo/poker games

 

http://www.ISAserver.org

Did it again.  Nothing.  Do I need to enable it to log the filter
information?  I added the column and it shows up but just has a single
dash on most lines or totally blank.

 

________________________________

From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] 
Sent: Tuesday, March 07, 2006 3:49 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: OT - ISA 2004 access rules yahoo/poker games

http://www.ISAserver.org

There has to be something there. Make sure that information is being
logged.

 

Thomas W Shinder, M.D.
Site: www.isaserver.org <http://www.isaserver.org/> 
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls

 

 

________________________________

From: Neil Cassidy [mailto:ncassidy@xxxxxxxxxxxxx] 
Sent: Tuesday, March 07, 2006 2:46 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: OT - ISA 2004 access rules yahoo/poker games

http://www.ISAserver.org

That column is blank.  Nothing gets added when I try again.

 

________________________________

From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] 
Sent: Tuesday, March 07, 2006 3:32 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: OT - ISA 2004 access rules yahoo/poker games

http://www.ISAserver.org

Neil,

Enable the Filter Information column to see what setting might have
triggered the block.

 

Thomas W Shinder, M.D.
Site: www.isaserver.org <http://www.isaserver.org/> 
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls

 

 

________________________________

From: Neil Cassidy [mailto:ncassidy@xxxxxxxxxxxxx] 
Sent: Tuesday, March 07, 2006 2:28 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: OT - ISA 2004 access rules yahoo/poker games

http://www.ISAserver.org

Yes, I tried that.  Here is a post: ((how do I get this in a more
readable format?  If I paste it to notepad it looks fine, but here not.
Are attachments allowed at this list?)

 

0.0.0.0 MyAgent No Proxy PS01  195.10.46.40 TCP   - -  -  - - - 0 234
2244 228  12202 The ISA Server denied the specified Uniform Resource
Locator (URL).  0x44 0x0 Web Proxy Filter 3/7/2006 3:20:49 PM
195.10.46.40 80 http Denied Connection SBS Internet Access Rule
192.168.16.24 anonymous Internal External GET
http://195.10.46.40/Downloads/vcc/upgradePG91-92man.exe


0.0.0.0 MyAgent No Proxy PS01  195.10.46.40 TCP   - -  -  - - - 0 1 2244
228  12202 The ISA Server denied the specified Uniform Resource Locator
(URL).  0x44 0x800 Web Proxy Filter 3/7/2006 3:20:49 PM 195.10.46.40 80
http Denied Connection SBS Internet Access Rule 192.168.16.24 anonymous
Internal External GET
http://195.10.46.40/Downloads/vcc/upgradepp91-92man.exe


0.0.0.0 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR
1.1.4322) No Proxy PS01  66.212.229.233 TCP   - -  -  - - - 0 47 2244
333  12202 The ISA Server denied the specified Uniform Resource Locator
(URL).  0x0 0x0 Web Proxy Filter 3/7/2006 3:20:51 PM 66.212.229.233 80
http Denied Connection SBS Internet Access Rule 192.168.16.24 anonymous
Internal External GET http://66.212.229.233/download.htm?wm=2565141


 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
ncassidy@xxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx 

Other related posts: