GFI WebMonitor 2009 SR2 Beta (Full Version)

All Forums >> [Web & Mail Security] >> GFI WebMonitor



Message

davidf -> GFI WebMonitor 2009 SR2 Beta (16.Jun.2009 8:58:31 AM)

GFI WebMonitor 2009 SR2 (build 20090615) now available

 
 


Download Locations:
 
http://software.gfi.com/beta/webmonitor2009.exe
 


Changes from Service Release 1 include:
 
- New feature: "Hidden Downloads" for monitoring when client processes download content in the background without user’s intention.
- New: Added filtering options in real time reporting of "Bandwidth Consumption -> Top Sites" to show only relevant sites.
- New: Real filetype detection now supports silverlight.
- New: MSN/Windows Live Messenger usage trend graph showing messages sent and received by each user over time.
- Better ISA array support to remove need for manual editing of files.
- Faster GUI and SQL ReportPack reporting.
- Dashboard and UI updates when running in Evaluation/Freeware mode.
 
Known Issues:
 
-WM’s GUI or IE with http://monitor.isa opened on dashboard page with autorefresh consumes always increasing amount of memory.
 
 
As always, we would greatly value your feedback. We will be replyiing to found issues/suggestions/requests directly on this forum.
 
On behalf of The GFI WebMonitor Team, DavidF.

 
 



Charlie IT -> RE: GFI WebMonitor 2009 SR2 Beta (16.Jun.2009 9:35:22 AM)

When upgrading will webmon retain my settings from SR1?



davidf -> RE: GFI WebMonitor 2009 SR2 Beta (16.Jun.2009 10:14:47 AM)

Yes upgrade from SR1 was tested and it will retain your configuration.
However there are exceptions:

- If admin changed DownloadingPage.html  in order to localize it for hi users/enviroment he will have to do it again.

- If admin changed DownloadingPage.html and Postf.aspx in order support his ISA array he doesn't need to do it. This is now handled automatically and changing of ISAServerUniqueID in  DownloadingPage.html is no longer needed.

- If admin changed POSTF.aspx in order to have PROC directory on different drive he will have to apply change again to upgraded POSTF.aspx.

- it is suggested to install at the beginning of the day.(upgrade process backs up current day database to .db.preupgrade file so pre-upgrade current day data will not be visible in live reports) 

Regards DavidF



Charlie IT -> RE: GFI WebMonitor 2009 SR2 Beta (16.Jun.2009 10:24:50 AM)

Thank you



davidf -> RE: GFI WebMonitor 2009 SR2 Beta (16.Jun.2009 1:43:34 PM)

I am adding screenshot of new feature: "Hidden downloads" where admin can see all blocked/unattended downloads from user's machine...
It is like Vista's UAC... if user doesn't manually accept executable download, it will not run/install.
It can include also valid automated updates like google picasa updates or chrome updates but also, very often, you can find unwated
downloads from exploits, trojans.. or activex downloads ... toolbars etc..

All above is blocked and now also visible for admin so he can black list it or whitelist it just by clicking on URL:

[image]http://farm4.static.flickr.com/3588/3633375184_f59ccd24cd_o.jpg[/image]



Charlie IT -> RE: GFI WebMonitor 2009 SR2 Beta (17.Jun.2009 8:34:19 AM)

installed this morning in ISA 2004 w win 2000 os.
all service packs installed.
many of these errors

Event Type: Error
Event Source: Microsoft ISA Server 2004
Event Category: None
Event ID: 1000
Date:  6/17/2009
Time:  9:14:20 AM
User:  N/A
Computer: FW2
Description:
Faulting application wspsrv.exe, version 4.0.2167.909, stamp 4977a087, faulting module webmonplg.dll, version 5.5.0.11, stamp 4a32490e, debug? 0, fault address 0x0003c057.
Data:
0000: 41 00 70 00 70 00 6c 00   A.p.p.l.
0008: 69 00 63 00 61 00 74 00   i.c.a.t.
0010: 69 00 6f 00 6e 00 20 00   i.o.n. .
0018: 46 00 61 00 69 00 6c 00   F.a.i.l.
0020: 75 00 72 00 65 00 20 00   u.r.e. .
0028: 20 00 77 00 73 00 70 00    .w.s.p.
0030: 73 00 72 00 76 00 2e 00   s.r.v...
0038: 65 00 78 00 65 00 20 00   e.x.e. .
0040: 34 00 2e 00 30 00 2e 00   4...0...
0048: 32 00 31 00 36 00 37 00   2.1.6.7.
0050: 2e 00 39 00 30 00 39 00   ..9.0.9.
0058: 20 00 34 00 39 00 37 00    .4.9.7.
0060: 37 00 61 00 30 00 38 00   7.a.0.8.
0068: 37 00 20 00 69 00 6e 00   7. .i.n.
0070: 20 00 77 00 65 00 62 00    .w.e.b.
0078: 6d 00 6f 00 6e 00 70 00   m.o.n.p.
0080: 6c 00 67 00 2e 00 64 00   l.g...d.
0088: 6c 00 6c 00 20 00 35 00   l.l. .5.
0090: 2e 00 35 00 2e 00 30 00   ..5...0.
0098: 2e 00 31 00 31 00 20 00   ..1.1. .
00a0: 34 00 61 00 33 00 32 00   4.a.3.2.
00a8: 34 00 39 00 30 00 65 00   4.9.0.e.
00b0: 20 00 66 00 44 00 65 00    .f.D.e.
00b8: 62 00 75 00 67 00 20 00   b.u.g. .
00c0: 30 00 20 00 61 00 74 00   0. .a.t.
00c8: 20 00 6f 00 66 00 66 00    .o.f.f.
00d0: 73 00 65 00 74 00 20 00   s.e.t. .
00d8: 30 00 30 00 30 00 33 00   0.0.0.3.
00e0: 63 00 30 00 35 00 37 00   c.0.5.7.
00e8: 0d 00 0a 00               ....   


Event Type: Error
Event Source: Microsoft Firewall
Event Category: None
Event ID: 14057
Date:  6/17/2009
Time:  9:14:14 AM
User:  N/A
Computer: FW2
Description:
The Firewall service stopped because an application filter module C:\Program Files\Microsoft ISA Server\WebMonPlg.dll generated an exception code C00000FD in address 2E85C057 when function CompleteAsyncIO was called. To resolve this error, remove recently installed application filters and restart the service.



davidf -> RE: GFI WebMonitor 2009 SR2 Beta (17.Jun.2009 8:53:18 AM)

How many times do you see that in eventv.  (if you have fw service autorestart on)?
Do you have one ISA server ..how many users?

Can you turn debug ON ?  to do that> regedit GFI/WebMonitor/Debug=1 and restart fw service.
Once it crashes, send me pls webmonplglog.txt from debuglogs directory. If you have autorestart of fw service on switch it off as otherwise webmonplglog.txt  will get overflowed by new data.

Thanx for feedback DavidF.



Charlie IT -> RE: GFI WebMonitor 2009 SR2 Beta (17.Jun.2009 9:08:03 AM)

1 isa server, 70 users

15, 14057 errors
1, 1000 error

turned on debugging and turned off restart fw service.



davidf -> RE: GFI WebMonitor 2009 SR2 Beta (17.Jun.2009 9:19:23 AM)

Thank You,

Please email me log file zipped to david a t gfi.com.
Also some more info if you run any other AV on server if you have any 3rd party products installed on ISA etc.. 

With Kind Regards DavidF.



Charlie IT -> RE: GFI WebMonitor 2009 SR2 Beta (17.Jun.2009 10:00:58 AM)

We are running GFI Mail Essentials, Mailsecurity current versions in gateway mode.
no other AV installed.
WebMon SR1 had no errors.



Charlie IT -> RE: GFI WebMonitor 2009 SR2 Beta (17.Jun.2009 11:25:38 AM)

update
3 hours since the restart, NO errors



davidf -> RE: GFI WebMonitor 2009 SR2 Beta (17.Jun.2009 11:30:28 AM)

10x...meanwhile we are trying to reproduce it here in QA dept. with similar setup you have...



davidf -> RE: GFI WebMonitor 2009 SR2 Beta (18.Jun.2009 3:28:21 AM)

So.. evernight we didnt managed to crash it in streass test on W2k ISA2004 + M. Essentials +Mail security.

Your crash log file would be a great value for us ;) Thanx.



Charlie IT -> RE: GFI WebMonitor 2009 SR2 Beta (18.Jun.2009 5:42:55 AM)

quote:

Faulting application wspsrv.exe, version 4.0.2167.909, stamp 4977a087, faulting module webmonplg.dll, version 5.5.0.11, stamp 4a32490e, debug? 0, fault address 0x0003c057.

still having problems
I just email you the WebMonPlgLog.txt file



davidf -> RE: GFI WebMonitor 2009 SR2 Beta (18.Jun.2009 7:42:33 AM)

Hi.. thanx for a file .. when it crashes once again can you send it one more time to davidF a t gfi.com?

Thank you DavidF.

P.S>: from first log I dont see anything conclusive :(



Page: [1] 2   next >   >>