[isalist] Re: Problems with Traffic/Stats Software not reporting properly...
- From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
- To: <isalist@xxxxxxxxxxxxx>
- Date: Sat, 19 Aug 2006 09:33:14 -0500
http://www.ISAserver.org
-------------------------------------------------------
Hi Jerry,
Is that "asynchronous" or "asymmetric"?
Or is that autochthonous? :))
Tom
Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Gerald Young
> Sent: Friday, August 18, 2006 5:31 PM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: Problems with Traffic/Stats Software
> not reporting properly...
>
> http://www.ISAserver.org
> -------------------------------------------------------
>
> There's just a couple of things you need to keep in mind.
>
> The path back to the Internet from the protected web servers will need
> to pass back through ISA, otherwise, you'll end up with asynchronous
> routing of traffic.
>
> Inbound Request: Internet -> ISA -> Published Server
> Outbound Response: Published Server -> Some other firewall/router ->
> Internet
>
> You'll also want to make sure that ISA isn't sitting in a DMZ
> protected
> by a different firewall. If it is, you'll need to be sure to
> allow the
> traffic from Internet IPs to pass back through the back side firewall.
>
> Front Side Firewall -> DMZ ISA -> Back Side Firewall
>
> If you're doing the standard Internet -> ISA -> Published Server,
> though, you should be fine with just the publishing and flipping that
> setting to allow ISA to pass back the source IP. Providing, of course
> that the path to the Internet from the published servers passes back
> through the ISA box.
>
> Published Server -> ISA -> Internet
>
> Cordially yours,
> Jerry G. Young II
> Applications Engineer, Platform Engineering
> Enterprise Hosting
> NTT America, an NTT Communications Company
>
> 22451 Shaw Rd.
> Sterling, VA 20166
>
> Office: 571-434-1319
> Fax: 703-333-6749
> Email: g.young@xxxxxxxx
>
> > -----Original Message-----
> > From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx]
> > On Behalf Of Steve Moffat
> > Sent: Friday, August 18, 2006 6:12 PM
> > To: ISA Mailing List
> > Subject: [isalist] Re: Problems with Traffic/Stats Software not
> reporting
> > properly...
> >
> > http://www.ISAserver.org
> > -------------------------------------------------------
> >
> > No you have it right. If you select the "requests appear to
> come from
> > the original user" in ISA 2004 or 2006, then the originating IP
> address
> > is passed to the published server.
> >
> > Steve
> >
> > -----Original Message-----
> > From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx]
> > On Behalf Of Mike Anderson
> > Sent: Friday, August 18, 2006 7:10 PM
> > To: ISA Mailing List
> > Subject: [isalist] Problems with Traffic/Stats Software not
> reporting
> > properly...
> >
> > http://www.ISAserver.org
> > -------------------------------------------------------
> >
> > Hello All,
> >
> > I was under the impression that when setting up the Web
> Listeners, and
> > selecting "requests appear to come from the original user" (or
> something
> > to that effect), that this would address the problems
> relating to Web
> > Servers sitting behind Firewalls, and everything now
> appearing to come
> > from a single IP Address.
> >
> > Am I overlooking something, or do I need to invest in a 3rd Party
> > package that can pass along the originating requestor, so
> that we can
> > get accurate stats?
> >
> > My clients business, depends entirely on these Stats and they are
> > getting pretty nervous in the meantime.
> >
> > Could anybody throw any information my way, that could help
> me out in
> > this regard?
> >
> > Thanks in advance,
> >
> > Mike
> > ------------------------------------------------------
> > List Archives: //www.freelists.org/archives/isalist/
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server Articles and Tutorials:
> > http://www.isaserver.org/articles_tutorials/
> > ISA Server Blogs: http://blogs.isaserver.org/
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> > ------------------------------------------------------
> > List Archives: //www.freelists.org/archives/isalist/
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server Articles and Tutorials:
> > http://www.isaserver.org/articles_tutorials/
> > ISA Server Blogs: http://blogs.isaserver.org/
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > Report abuse to listadmin@xxxxxxxxxxxxx
>
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
>
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
