Where's the beef?
|
Logged in as: Guest
|
|
Users viewing this topic:
none
|
|
Login  | |
|
Where's the beef? - 20.Nov.2005 7:23:00 AM
|
|
|
LLigetfa
Posts: 10
Joined: 11.Sep.2005
From: fort frances.on.ca
Status: offline
|
OK, I understand the Active Connections view will be fixed so that there should be more than just wpad entries, but I am not getting much useful info on the other screens.
The URL History screen has a whole lot of incomplete URLs like:
mage
s
icons
pfiles
ss
...
It also has all the connection verifiers that ISA has configured. Also, all the URLs that are actually denied by rules still accumulate stats.
Users History includes the same shortcomings as URL History like the ISA server's connectivity verifiers, blocked URLs, incmplete URLs, etc.
Last Web Access purports that one should "See the last 200 URLs accessed through the ISA Server" but for me it is usually blank. Sometimes I might catch one of the connectivity verifiers.
Where's the beef?
|
|
|
|
|
RE: Where's the beef? - 21.Nov.2005 5:10:00 AM
|
|
|
Nicks
Posts: 2741
Joined: 17.Mar.2003
Status: offline
|
Hi,
Can you check the build that you are using?
The issue that you have mentioned is known to occur in older builds, but should be addressed in the latest build (20050902).
|
|
|
|
|
RE: Where's the beef? - 21.Nov.2005 9:24:00 AM
|
|
|
LLigetfa
Posts: 10
Joined: 11.Sep.2005
From: fort frances.on.ca
Status: offline
|
Version Information
GFI WebMonitor
Copyright (c) 2003-2005 GFI Software Ltd.
Version: 3.41
Build: 20050902
|
|
|
|
|
RE: Where's the beef? - 25.Nov.2005 3:43:00 AM
|
|
|
LLigetfa
Posts: 10
Joined: 11.Sep.2005
From: fort frances.on.ca
Status: offline
|
OK, I know it looks like I am just a whiner, but I probably represent a fair percentage of your potential customer base. To be honest, I did get an eval key but have not even bothered to test the advanced features of WM3. If I cannot get the basic stuff to meet my expectation, I will not invest the time to do a full eval.
Don't get me wrong. I am not lazy. I do participate in beta programs for other (unrelated) software.
Perhaps I just fell victim to your marketing department hype, but my first dissapointment is that WM3 is severely limited because it is just a web filter. Now correct me if I'm wrong, but as a web filter only, WM3 will only report on web proxy traffic and not on firewall client and S-NAT. It will not report on real FTP downloads, streaming audio and video, etc. These (firewall clients) are my big hitters and what I was hoping to monitor. I must also then presume that the virus protection would likewise be limited to what the web filter can intercept.
If my presumptions are correct, then your marketing department failed to manage my expectations. I did try out WM2 and by comparison, WM3 is considerably more mature but IMHO, not ready for market. I will keep an eye on it to see what the future may bring and reconsider it then.
|
|
|
|
|
RE: Where's the beef? - 5.Feb.2006 11:51:43 AM
|
|
|
LLigetfa
Posts: 10
Joined: 11.Sep.2005
From: fort frances.on.ca
Status: offline
|
Does anyone know when there will be the next major release of WebMonitor? When it does come out, if I want to eval it, will I run into the same impass as I did with 3.1 not allowing an eval because I squandered it on 3.0?
GFI does not seem to want my business. I get no answers here. I email their Sales Department and get no answers. I even tried the Customer Feedback and heard nothing.
What hope does GFI offer for the outstanding issues I raised?
Will monitoring ever extend to FTP and other non-HTTP protocols?
Will virus protection ever go beyond what it does now?
|
|
|
|
|
RE: Where's the beef? - 10.Feb.2006 11:52:47 AM
|
|
|
Nicks
Posts: 2741
Joined: 17.Mar.2003
Status: offline
|
Hi,
WebMonitor is designed to check only web traffic. FTP traffic can be monitored by disabling folder view in Internet Explorer. This will allow Internet Explorer to request information from ftp server, however they will be seen as http requests by WebMonitor. The ftp protocol should be disabled in ISA Server so the users will not be able to download content through other ftp applications.
_____________________________
Nicholas Sciberras
GFI Software - www.gfi.com
Messaging, Content Security & Network Security Software
|
|
|
|
|
RE: Where's the beef? - 11.Feb.2006 4:08:59 PM
|
|
|
davidf
Posts: 143
Joined: 29.Jul.2003
Status: offline
|
Hi LLigetfa,
Your description was common for SNAT clients requests.
That was addressed in version 2 of WebMonitor.
What might happen is that your network SNAT web clients have HTTP version 1.0. That would result in your described behavior even with newer version.
In Such case monitor is just showing you potential problem. There is nothing wrong with it.
To confirm that
1. download build 20060130
2. turn debug ON
3. reproduce in URL history incomplete site names
4. send ziped files from debuglogs directory to support at gfi .
If you will address it to davidfa, I will explain you what is happening on your network.
With Kind Regards DavidFA
|
|
|
|
|
RE: Where's the beef? - 11.Feb.2006 4:45:36 PM
|
|
|
LLigetfa
Posts: 10
Joined: 11.Sep.2005
From: fort frances.on.ca
Status: offline
|
There is no point in my downloading the latest build if my unlicensed trial period has expired. At least that was my experience with the last download I tried.
None of my clients are S-NAT, only WP and FWC. I have two ports on my WAN router, one for the ISA External and the other for the ISA Internal and my clients. My clients DG is the Cisco router, not my ISA.
From what Nick says, WM3 does not meet my needs. I am not interested in blocking all true FTP in order to get WM3 to report on it. That kludge still leaves the streaming protocols unreported.
If GFI does not have any plans to fill my need, I will either do without, or try to find another product that is a closer fit.
Thanks for trying.
|
|
|
|
|
RE: Where's the beef? - 12.Feb.2006 9:26:21 AM
|
|
|
davidf
Posts: 143
Joined: 29.Jul.2003
Status: offline
|
Hi LLigetfa
I understand. WebMonitor is what is says. Web Monnitor, doesn't monitor other ip sub-protocols.
Monitoring of FTP passing via proxy is just consequence of ftp bypass via web proxy found in some standard web/ftp clients.
However if you saw partial URLs with version 3 it indicates some potential problem on your network.
FWC can carry http 1.0 clients (these might waste your ISA resources as it would not understand them due to their http request structure).
However you are right: with expired trial we can not help further. Only if we prolong it.
If you are still interested (I fully understand that you look for monitor tool which would monitor all connections) please send request for extended evaluation number. As a reason refer to this forum topic.
With Kind Regards DvaidFA.
P.S.: We have tested monitoring of all connections however due to ISA architecture it slows down ISA traffic at maximum throuput 25% so we dropped this new feature for now. Well maybe later, when ISA2006 comes out.
|
|
|
|
 New Messages |
 No New Messages |
 Hot Topic w/ New Messages |
 Hot Topic w/o New Messages |
 Locked w/ New Messages |
 Locked w/o New Messages |
|
 Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|
|
Printable Version
