Solved

Monitoring web usage with ISA proxy in place

Posted on 2011-03-01
14
394 Views
Last Modified: 2012-05-11
Hello, I have a MS windows 2003 with ISA 2006 STD and using it as a proxy. I also have a network tap in place to monitor bandwidth usage. I can see what systems are utilizing the most bandwidth but I cannot see what sites user are going to due to the proxy.  All I see is user A going to proxy address and that's it. Is it possible to even see the web address users are going to? If so how?

Thanks
0
Comment
Question by:clynch302
  • 6
  • 3
14 Comments
 
LVL 6

Expert Comment

by:alienXeno
ID: 35014522
its been a long time since I had worked on ISA , but I think (if I rmember ) ,  You can turn on logging in Monitoring Configuration: Logs.  This could then be imported on a daily basis into Access etc for querying.
0
 
LVL 23

Expert Comment

by:Suliman Abu Kharroub
ID: 35015696
ISA server has a reporting tool, which allow you to do that.

Monitoring --> reports. and for live monitor you can use logging tab.
0
 

Author Comment

by:clynch302
ID: 35018896
Yes i know that Ia has a logging tab but I am using Colasoft Capsa that does real time network monitoring and was just wondering if it was possible to actually see the user traffic going to the website instead of the proxy server. I know when I was not using a proxy I can see what sites users were visiting and how much bandwidth it was consuming,
0
 

Author Comment

by:clynch302
ID: 35018946
Aslo....The ISA logs also shows users just going to the Proxy and the actual website.
0
 
LVL 23

Expert Comment

by:Suliman Abu Kharroub
ID: 35020816
I had never heard about  Colasoft Capsa, so I font know If it supports ISA as webproxy configuration.

But, It does make sense to see traffic source "ISA-server", because ISA server acts as webproxy not NAT.
0
Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

 

Author Comment

by:clynch302
ID: 35020843
Ya Capsa is just a kicked up Wireshark. I was just wondering if there was a way around it.
0
 
LVL 23

Expert Comment

by:Suliman Abu Kharroub
ID: 35020946
looks good.
I am currently downloading it.... will see if can find out a workaround.
0
 

Author Comment

by:clynch302
ID: 35023194
Thanks.....Let me know
0
 

Accepted Solution

by:
clynch302 earned 0 total points
ID: 35305976
Not abandon, just no answers.
0
 

Author Closing Comment

by:clynch302
ID: 35458490
No answer
0

Featured Post

Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

Join & Write a Comment

Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
When you start your Windows 10 PC and got an "Operating system not found" error or just saw  "Auto repair for startup". After a while, you have entered a loop for Auto repair which does not fix anything and you will be in a  panic as all your work w…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now