I guess I am still confused. Below is an example of Top Web Users.....My question is that my user name is listed and then my IP address is listed, 172.16.1.57. So your saying that when my requests are authenticated it lists my user name and when they are not it lists my IP address for anonymous. I have Ask Unauthenticated Users for Identification checked on the Outgoing Web Requests Tab. I would just like to present reports to my boss that do not break down a users web access by user name half the time and IP address the other half. Good report that just needs some consolidation. Do you have any recommendations on how to present this information? Thanks again for your help. 2 ARCATL\DSMITH 520 5.1 % 16.2 MB 22.0 % 226.5 KB 5.4 % 16.5 MB 21.1 % 3 ARCATL\SANDREWS 1588 15.6 % 6.6 MB 8.9 % 1.1 MB 26.5 % 7.6 MB 9.8 % 4 ARCATL\sfaust 1102 10.8 % 5.8 MB 7.9 % 529.9 KB 12.7 % 6.3 MB 8.2 % 5 172.16.1.57 1069 10.5 % 3.4 MB 4.7 % 229.8 KB 5.5 % 3.7 MB 4.7 % 6 172.16.1.53 1215 11.9 % 3.5 MB Sean Faust American Red Cross Atlanta Chapter Office (404) 575-3123 sfaust@xxxxxxxxxx -----Original Message----- From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] Sent: Sunday, February 10, 2002 2:40 PM To: [ISAserver.org Discussion List] Subject: [isalist] Re: Web Usage Reports http://www.ISAserver.org This gets back to ISA logging every request, as well. All proxy clients attempt anonymous connections first (usually multiple times). Since ISA is very anal (almost colonial) about logging and there is no user data for those connections, these are reported as IP. The number of anonymous connections will always exceed the number of authenticated ones, making it appear to the very basic ISA reports as if you're serving more anonymous data than authenticated. Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/authors/harrison/ Read the books! ----- Original Message ----- From: "Sean Faust" <sfaust@xxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Friday, February 08, 2002 07:27 Subject: [isalist] Re: Web Usage Reports http://www.ISAserver.org Thanks, that makes sense. Next question is in the Web Traffic by users in the User column I have domain\user name with their request numbers and several lines down I will have an IP address with more data that resolves back to that users station. Why would the user name be resolved and then also have data by IP address? I thought the only way to resolve names was to install the Firewall Client? It states under Top Web Users that Network Addresses are presented when user names are unknown. What would cause ISA to know the user name with one request but not another? Sean Faust American Red Cross Atlanta Chapter Office (404) 575-3123 Cell(404) 909-0778 sfaust@xxxxxxxxxx -----Original Message----- From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] Sent: Thursday, February 07, 2002 8:42 AM To: [ISAserver.org Discussion List] Subject: [isalist] Re: Web Usage Reports http://www.ISAserver.org That would be the cache updating itself. ISA logs everything that passes through it and since it's logging itself, it's providing the best information it has. Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/authors/harrison/ Read the books! ----- Original Message ----- From: "Sean Faust" <sfaust@xxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Thursday, February 07, 2002 04:32 Subject: [isalist] Web Usage Reports http://www.ISAserver.org Good Morning Everyone, When running the Web Usage Reports one of the items is labeled Fetch API. Why does this show up as a user and what does this mean? Thanks Sean Faust American Red Cross Atlanta Chapter Office (404) 575-3123 Cell(404) 909-0778 sfaust@xxxxxxxxxx ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: sfaust@xxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: sfaust@xxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')