But.........when I attempt to import the ISA Log into Microsoft Site Server 3 (service Pack 4) it responds with the following message: UNABLE TO OPEN ANY LOG FILES ASSOCIATED WITH THE FOLLOWING LOG DATA SOURCE: Log Data Source I have used Site Server for years so I am pretty sure it is all configured correctly for reading an IIS Log - do I have to change it in someway to read an ISA Log? I have tried setting it to read Proxy Server Logs, but it didn't like that either! Regards Paul Gower Technical Director Paradisii Limited 64 High Street Lewes East Sussex BN7 1XG Tel: (01273) 470006 Fax: (01273) 470007 Mobile: (07973) 172650 http://www.paradisii.co.uk -----Original Message----- From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] Sent: 24 September 2001 17:26 To: [ISAserver.org Discussion List] Subject: [isalist] Re: Usage Analysis http://www.ISAserver.org I'd say that your best data results is using the best of both, but it depends on your needs. The ISA web log will not only tell the customer's request, it'll also tell what ISA or the internal web server thought of it. Jim Harrison MCP(2K), A+, Network+, PCG ----- Original Message ----- From: "Paul Gower" <paul@xxxxxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Monday, September 24, 2001 09:17 Subject: [isalist] Re: Usage Analysis http://www.ISAserver.org Thanks for that - why do I need to worry about the IIS Logs if I use the ISA Logs? Regards Paul Gower Technical Director Paradisii Limited 64 High Street Lewes East Sussex BN7 1XG Tel: (01273) 470006 Fax: (01273) 470007 Mobile: (07973) 172650 http://www.paradisii.co.uk -----Original Message----- From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] Sent: 24 September 2001 17:06 To: [ISAserver.org Discussion List] Subject: [isalist] Re: Usage Analysis http://www.ISAserver.org It will contain the request as made by the client. The trick here is to coordinate your log analysis the ISA logs and the IIS logs. Jim Harrison MCP(2K), A+, Network+, PCG ----- Original Message ----- From: "Paul Gower" <paul@xxxxxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Monday, September 24, 2001 07:42 Subject: [isalist] Re: Usage Analysis http://www.ISAserver.org But that doesn't contain details of the pages viewed - does it??? Regards Paul Gower Technical Director Paradisii Limited 64 High Street Lewes East Sussex BN7 1XG Tel: (01273) 470006 Fax: (01273) 470007 Mobile: (07973) 172650 http://www.paradisii.co.uk -----Original Message----- From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] Sent: 24 September 2001 15:05 To: [ISAserver.org Discussion List] Subject: [isalist] Re: Usage Analysis http://www.ISAserver.org Point your web log analyzer to the ISA WEB...log for IP analysis. That way you can keep your sites web-published and maintain your IP-based reporting. Jim Harrison MCP(2K), A+, Network+, PCG ----- Original Message ----- From: "Paul Gower" <paul@xxxxxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Monday, September 24, 2001 6:55 AM Subject: [isalist] Usage Analysis http://www.ISAserver.org I'm sure this has been discussed here many times before, so please forgive me for asking again! I have a number of customer web sites published using Web Publishing Rules, sitting behind my ISA server. This means, I believe, that all IP numbers that are recorded in the web sites log files will be that of the ISA server - making geographic analysis useless. Is there a solution to this? The rest of the log files will be fine for showing pages visited etc. but it is nice to be able to do WHOIS etc. etc. on the log files so that we can see where are visitors are coming from etc. If I publish the web servers using server publishing rules, I believe I do get the real IP number - but at what potential security risks to my sites? Regards Paul Gower Technical Director Paradisii Limited 64 High Street Lewes East Sussex BN7 1XG Tel: (01273) 470006 Fax: (01273) 470007 Mobile: (07973) 172650 http://www.paradisii.co.uk ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: paul@xxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: paul@xxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: paul@xxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')