Serdar Karahanoglu

I have been struggling to get my iPhone working against my corporate ISA proxy server . Once I had connected to WiFi, Safari would continually prompt me for my domain user name and password, and none of the apps would work (maybe because they didn't know how to prompt me for credentials). After a bit of poking around with fiddler, telnet, and all sorts of settings, I was certain that the problem was our ISA Proxy server's NTLM authentication. NTLM is an authentication mechanism from Microsoft. Microsoft's ISA Proxy Server uses NTLM to be able to tell which active directory user is attempting to access the internet. If you're surfing with Internet Explorer, it picks up your username directly from your login, and you might not even realise that IE is authenticating you. If you're using firefox, you might get prompted the first time you go on the internet. As far as I can tell, Google Chrome prompts you each time you launch it. If you're trying to get online with...

One of the most common questions I see on the ISAServer.org Web boards and mailing list is how to get user and URL information in the ISA firewall's logs and reports. The ISA firewall creates reports using ISA log summaries. The log summaries are derived from the ISA firewall's Web Proxy filter and Firewall service logs. If you want to see user information and URLs (instead of IP addresses) in the reports, you've got to get that information into the logs first. You need to address the following issues to get the user information into the logs: Configure the Web Proxy log to record user and URL information Configure all machines on the internal network as Web Proxy and Firewall clients Remove anonymous access rules that would apply before authenticated access rules Install LogHostname to get URLs for SecureNAT clients NOTE : This article is not a comprehensive review of the ISA firewall's logging and reporting features. Check out the last chapter in our book Config...

ISA Server includes a reporting feature that you can use for a number of purposes: Use reports to obtain and view information on usage statistics of the server for both computers and client users. Create your own reports. Each report here consists of a number of sub-reports, taking the form of charts and graphs. This concept is illustrated on the 2nd page of the Article: The predefined ISA Server reports are listed here: Summary reports : These reports combine data from the Firewall service log and Web proxy service log, to show network traffic usage. Summary reports are sorted by application and are especially useful when you need to manage Internet connectivity, or determine trends traffic patterns. Web Usage reports : These reports show information on how the Web is being used, and detail information on: Top Web users Common responses Browsers in use Web Usage reports use information in the Web Proxy service logs. Application usage reports : These reports show Internet a...