Forums  Register  Login  My Profile  Inbox  Address Book  My Subscription  My Forums 

Member List  Search  FAQ  Ticket List  Log Out

 

GFI WebMonitor 2009 SR2 Beta

  		Logged in as: Guest
Users viewing this topic: none
  Printable Version
All Forums >> [Web & Mail Security] >> GFI WebMonitor >> GFI WebMonitor 2009 SR2 Beta Page: [1] 2   next >   >>
Login
Message << Older Topic   Newer Topic >>
GFI WebMonitor 2009 SR2 Beta - 16.Jun.2009 8:58:31 AM   
davidf

 

Posts: 143
Joined: 29.Jul.2003
Status: offline 		GFI WebMonitor 2009 SR2 (build 20090615) now available

 
 


Download Locations:
 
http://software.gfi.com/beta/webmonitor2009.exe
 


Changes from Service Release 1 include:
 
- New feature: "Hidden Downloads" for monitoring when client processes download content in the background without user’s intention.
- New: Added filtering options in real time reporting of "Bandwidth Consumption -> Top Sites" to show only relevant sites.
- New: Real filetype detection now supports silverlight.
- New: MSN/Windows Live Messenger usage trend graph showing messages sent and received by each user over time.
- Better ISA array support to remove need for manual editing of files.
- Faster GUI and SQL ReportPack reporting.
- Dashboard and UI updates when running in Evaluation/Freeware mode.
 
Known Issues:
 
-WM’s GUI or IE with http://monitor.isa opened on dashboard page with autorefresh consumes always increasing amount of memory.
 
 
As always, we would greatly value your feedback. We will be replyiing to found issues/suggestions/requests directly on this forum.
 
On behalf of The GFI WebMonitor Team, DavidF.

 
 
Post #: 1
RE: GFI WebMonitor 2009 SR2 Beta - 16.Jun.2009 9:35:22 AM   
Charlie IT

 

Posts: 191
Joined: 1.Mar.2005
Status: offline 		When upgrading will webmon retain my settings from SR1?

(in reply to davidf)
Post #: 2
RE: GFI WebMonitor 2009 SR2 Beta - 16.Jun.2009 10:14:47 AM   
davidf

 

Posts: 143
Joined: 29.Jul.2003
Status: offline 		Yes upgrade from SR1 was tested and it will retain your configuration.
However there are exceptions:

- If admin changed DownloadingPage.html  in order to localize it for hi users/enviroment he will have to do it again.

- If admin changed DownloadingPage.html and Postf.aspx in order support his ISA array he doesn't need to do it. This is now handled automatically and changing of ISAServerUniqueID in  DownloadingPage.html is no longer needed.

- If admin changed POSTF.aspx in order to have PROC directory on different drive he will have to apply change again to upgraded POSTF.aspx.

- it is suggested to install at the beginning of the day.(upgrade process backs up current day database to .db.preupgrade file so pre-upgrade current day data will not be visible in live reports) 

Regards DavidF

(in reply to Charlie IT)
Post #: 3
RE: GFI WebMonitor 2009 SR2 Beta - 16.Jun.2009 10:24:50 AM   
Charlie IT

 

Posts: 191
Joined: 1.Mar.2005
Status: offline 		Thank you

(in reply to davidf)
Post #: 4
RE: GFI WebMonitor 2009 SR2 Beta - 16.Jun.2009 1:43:34 PM   
davidf

 

Posts: 143
Joined: 29.Jul.2003
Status: offline 		I am adding screenshot of new feature: "Hidden downloads" where admin can see all blocked/unattended downloads from user's machine...
It is like Vista's UAC... if user doesn't manually accept executable download, it will not run/install.
It can include also valid automated updates like google picasa updates or chrome updates but also, very often, you can find unwated
downloads from exploits, trojans.. or activex downloads ... toolbars etc..

All above is blocked and now also visible for admin so he can black list it or whitelist it just by clicking on URL:


(in reply to Charlie IT)
Post #: 5
RE: GFI WebMonitor 2009 SR2 Beta - 17.Jun.2009 8:34:19 AM   
Charlie IT

 

Posts: 191
Joined: 1.Mar.2005
Status: offline 		installed this morning in ISA 2004 w win 2000 os.
all service packs installed.
many of these errors

Event Type: Error
Event Source: Microsoft ISA Server 2004
Event Category: None
Event ID: 1000
Date:  6/17/2009
Time:  9:14:20 AM
User:  N/A
Computer: FW2
Description:
Faulting application wspsrv.exe, version 4.0.2167.909, stamp 4977a087, faulting module webmonplg.dll, version 5.5.0.11, stamp 4a32490e, debug? 0, fault address 0x0003c057.
Data:
0000: 41 00 70 00 70 00 6c 00   A.p.p.l.
0008: 69 00 63 00 61 00 74 00   i.c.a.t.
0010: 69 00 6f 00 6e 00 20 00   i.o.n. .
0018: 46 00 61 00 69 00 6c 00   F.a.i.l.
0020: 75 00 72 00 65 00 20 00   u.r.e. .
0028: 20 00 77 00 73 00 70 00    .w.s.p.
0030: 73 00 72 00 76 00 2e 00   s.r.v...
0038: 65 00 78 00 65 00 20 00   e.x.e. .
0040: 34 00 2e 00 30 00 2e 00   4...0...
0048: 32 00 31 00 36 00 37 00   2.1.6.7.
0050: 2e 00 39 00 30 00 39 00   ..9.0.9.
0058: 20 00 34 00 39 00 37 00    .4.9.7.
0060: 37 00 61 00 30 00 38 00   7.a.0.8.
0068: 37 00 20 00 69 00 6e 00   7. .i.n.
0070: 20 00 77 00 65 00 62 00    .w.e.b.
0078: 6d 00 6f 00 6e 00 70 00   m.o.n.p.
0080: 6c 00 67 00 2e 00 64 00   l.g...d.
0088: 6c 00 6c 00 20 00 35 00   l.l. .5.
0090: 2e 00 35 00 2e 00 30 00   ..5...0.
0098: 2e 00 31 00 31 00 20 00   ..1.1. .
00a0: 34 00 61 00 33 00 32 00   4.a.3.2.
00a8: 34 00 39 00 30 00 65 00   4.9.0.e.
00b0: 20 00 66 00 44 00 65 00    .f.D.e.
00b8: 62 00 75 00 67 00 20 00   b.u.g. .
00c0: 30 00 20 00 61 00 74 00   0. .a.t.
00c8: 20 00 6f 00 66 00 66 00    .o.f.f.
00d0: 73 00 65 00 74 00 20 00   s.e.t. .
00d8: 30 00 30 00 30 00 33 00   0.0.0.3.
00e0: 63 00 30 00 35 00 37 00   c.0.5.7.
00e8: 0d 00 0a 00               ....   


Event Type: Error
Event Source: Microsoft Firewall
Event Category: None
Event ID: 14057
Date:  6/17/2009
Time:  9:14:14 AM
User:  N/A
Computer: FW2
Description:
The Firewall service stopped because an application filter module C:\Program Files\Microsoft ISA Server\WebMonPlg.dll generated an exception code C00000FD in address 2E85C057 when function CompleteAsyncIO was called. To resolve this error, remove recently installed application filters and restart the service.

(in reply to davidf)
Post #: 6
RE: GFI WebMonitor 2009 SR2 Beta - 17.Jun.2009 8:53:18 AM   
davidf

 

Posts: 143
Joined: 29.Jul.2003
Status: offline 		How many times do you see that in eventv.  (if you have fw service autorestart on)?
Do you have one ISA server ..how many users?

Can you turn debug ON ?  to do that> regedit GFI/WebMonitor/Debug=1 and restart fw service.
Once it crashes, send me pls webmonplglog.txt from debuglogs directory. If you have autorestart of fw service on switch it off as otherwise webmonplglog.txt  will get overflowed by new data.

Thanx for feedback DavidF.

(in reply to Charlie IT)
Post #: 7
RE: GFI WebMonitor 2009 SR2 Beta - 17.Jun.2009 9:08:03 AM   
Charlie IT

 

Posts: 191
Joined: 1.Mar.2005
Status: offline 		1 isa server, 70 users

15, 14057 errors
1, 1000 error

turned on debugging and turned off restart fw service.

(in reply to davidf)
Post #: 8
RE: GFI WebMonitor 2009 SR2 Beta - 17.Jun.2009 9:19:23 AM   
davidf

 

Posts: 143
Joined: 29.Jul.2003
Status: offline 		Thank You,

Please email me log file zipped to david a t gfi.com.
Also some more info if you run any other AV on server if you have any 3rd party products installed on ISA etc.. 

With Kind Regards DavidF.

(in reply to Charlie IT)
Post #: 9
RE: GFI WebMonitor 2009 SR2 Beta - 17.Jun.2009 10:00:58 AM   
Charlie IT

 

Posts: 191
Joined: 1.Mar.2005
Status: offline 		We are running GFI Mail Essentials, Mailsecurity current versions in gateway mode.
no other AV installed.
WebMon SR1 had no errors.

(in reply to davidf)
Post #: 10
RE: GFI WebMonitor 2009 SR2 Beta - 17.Jun.2009 11:25:38 AM   
Charlie IT

 

Posts: 191
Joined: 1.Mar.2005
Status: offline 		update
3 hours since the restart, NO errors

(in reply to Charlie IT)
Post #: 11
RE: GFI WebMonitor 2009 SR2 Beta - 17.Jun.2009 11:30:28 AM   
davidf

 

Posts: 143
Joined: 29.Jul.2003
Status: offline 		10x...meanwhile we are trying to reproduce it here in QA dept. with similar setup you have...

(in reply to Charlie IT)
Post #: 12
RE: GFI WebMonitor 2009 SR2 Beta - 18.Jun.2009 3:28:21 AM   
davidf

 

Posts: 143
Joined: 29.Jul.2003
Status: offline 		So.. evernight we didnt managed to crash it in streass test on W2k ISA2004 + M. Essentials +Mail security.

Your crash log file would be a great value for us ;) Thanx.

(in reply to davidf)
Post #: 13
RE: GFI WebMonitor 2009 SR2 Beta - 18.Jun.2009 5:42:55 AM   
Charlie IT

 

Posts: 191
Joined: 1.Mar.2005
Status: offline
quote:

Faulting application wspsrv.exe, version 4.0.2167.909, stamp 4977a087, faulting module webmonplg.dll, version 5.5.0.11, stamp 4a32490e, debug? 0, fault address 0x0003c057.

still having problems
I just email you the WebMonPlgLog.txt file

(in reply to davidf)
Post #: 14
RE: GFI WebMonitor 2009 SR2 Beta - 18.Jun.2009 7:42:33 AM   
davidf

 

Posts: 143
Joined: 29.Jul.2003
Status: offline 		Hi.. thanx for a file .. when it crashes once again can you send it one more time to davidF a t gfi.com?

Thank you DavidF.

P.S>: from first log I dont see anything conclusive :(

(in reply to Charlie IT)
Post #: 15
Page:   [1] 2   next >   >>
All Forums >> [Web & Mail Security] >> GFI WebMonitor >> GFI WebMonitor 2009 SR2 Beta Page: [1] 2   next >   >>
Jump to:





New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts