RE: Question about anonymous showing up in Logs
- From: "Durga Datt" <ddatt@xxxxxxxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>, <larked@xxxxxxxxxx>
- Date: Wed, 7 May 2003 14:18:37 +1000
Hello Dan,
I have had the same problem too.
Usually if the Browser is set to a home page on the net and the moment
you run the browser before it authenicates the user (if the ISA server
is set to non-integrated mode for authentication with the domain)I
assume it says annonymous.
"Ask unauthenticated users for identification" check for both incoming
and outgoing web request helps authenticate a Mac user, or a different
user when another user is logged in on the PC on to itself or in
workgroup mode.
Regards.
Durga Datt
IT-Systems & Network Engineer
Mobile: 04-3812-0001, Em: ddatt@xxxxxxxxxxxxxxxxxx
Sinnott Bros Pty Ltd
11-15 Cockthorpe Rd, Auburn, NSW 2144, Au.
Ph: (02) 9646-4522, Fx: (02) 9649-9889
www.sinnottbros.com.au
PRIVILEGED - PRIVATE AND CONFIDENTIAL: This e-mail is solely for the use
of the addressee and may contain information which is confidential or
privileged. If you receive the e-mail in error, please delete it from
your system immediately and notify the sender by e-mail or using any of
the above contact details.
-----Original Message-----
From: Larke, Daniel [mailto:LarkeD@xxxxxxxxxx]
Sent: Wednesday, 7 May 2003 3:23 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Question about anonymous showing up in Logs
http://www.ISAserver.org
Hey,
I have a lot of anonymous users showing up in my Webproxy logs for ISA.
I was wondering why they are there. I do have "Ask unauthenticated
users for identification" check for both incoming and outgoing web
request.
Another part of this puzzle is at the same time a web call is being made
from the same computer to the same site. The different about this call
is that it has the user name. Here is example of the log.
anonymous wisapidata.weatherbug.com 10.1.3.122
4167
299 00:05:50 05/04/03
anonymous wisapidata.weatherbug.com 10.1.3.122
803
0 00:05:50 05/04/03
USOCE\diazk wisapidata.weatherbug.com 10.1.3.122 138
523
00:05:50 05/04/03
Does spyware type applications make a web call under anonymous and still
get out even with "Ask unauthenticated users for identification" checked
off.
I'm toying with the idea of blocking some sites and things like that,
but thats a policatal battle.
Thanks and have a nice day.
Dan
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/ Windows
Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT
Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
ddatt@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')
Other related posts:
