GFI
English Deutsch Français Italiano Nederlands Español
Forums  Register  Login  My Profile  Inbox  Address Book  My Subscription  My Forums 

Member List  Search  FAQ  Ticket List  Log Out

 

users count

 
Logged in as: Guest
Users viewing this topic: none
  Printable Version
All Forums >> [Content Security] >> GFI WebMonitor for ISA Server >> users count Page: [1]
Login
Message << Older Topic   Newer Topic >>
users count - 17.Sep.2008 11:36:34 AM   
huwy123

 

Posts: 4
Joined: 1.Sep.2008
Status: offline
Hi All,

GFI keeps telling us there are over 50 users present, but as far as we can make out we aren’t using anything like that number.

Can you tell me how it calculates this number?

Cheers,
H
Post #: 1
RE: users count - 17.Sep.2008 11:45:00 AM   
DrewE

 

Posts: 476
Joined: 28.Apr.2008
From: Cary, NC
Status: offline
GFI WebMonitor counts users in two methods.



(1) When the ISA Server forces all users to authenticate
(2) When the ISA server allows anonymous connections.


Here are the details regarding how it counts users.



When authentication is used:
 
Ø      Webmonitor has access to both IP where the connection was initiated from and the username of the user. GFI Webmonitor will store both username and IP and will consume one license.
 
Ø      Licenses will not be consumed if an un-authenticated connection was made from the same IP address.
 
Ø      2 Licenses will be consumed if 2 authenticated connections are made from the same IP address, but two different usernames. This may case problems in the following scenario:
 
Some services run as LocalSystem on the client machine and may need Internet access. ISA Server is configured to authenticate all web connections. In this case the connection made by the service will be authenticated as MachineName$. 2 licenses will be consumed if the user on the machine will make an authenticated connection to the internet. This cannot be changed since the username of a normal user can also end with a $ character.
 
Ø      If authenticated connections are made from different IP’s but the same username only 1 license will be consumed













                   


When authentication is not used:
 
 
Ø      GFI Webmonitor will not have the user information for un-authenticated users. In this case only the IP address will be stored for licensing purposes and this will consume one license. A license WILL NOT be consumed if an authenticated connection was previously made from the same IP address.
 
Identifying Counted Users:
 
Ø      If all connections used need to be authenticated, the administrator can easily see which users are counted for licensing purposes from the Users History > Top surfers node. This will show all users which have at least one outgoing connection through the ISA server and which has been monitored by GFI Webmonitor in the last day. The administrator may need to check the previous days also to identify all the users.
 
Ø      If all connections are aun-authenticated, the IP addresses will be shown instead of the username.
 
Ø      If only some of the connections are authenticated the administrator will not be able to immediately identify the users which are consuming a license. He will first need to count the usernames of authenticated connections. Then he will need to check the IP addresses and add the ones which he thinks may not have bee used by one of the authenticated users.

_____________________________

Drew Easley - Technical Support Representative
GFI Software - www.gfi.com

(in reply to huwy123)
Post #: 2
RE: users count - 22.Sep.2008 10:16:08 AM   
lcretu

 

Posts: 2
Joined: 22.Sep.2008
Status: offline
Hello DrewE,

I have the following situation:

- gfiwebmonitor 4.0 on isa 2004 un-authenticated
- 500 licenses, more than 1000 users, no more than 300 concurrent users

I get the following message:
GFI WebMonitor "GFI WebMonitor notification: licensed user count is exceeded."


How GFi counts licenses in this scenario? For how long are the IPs retained in database after a closed session?

Thank you, 

(in reply to huwy123)
Post #: 3
RE: users count - 22.Sep.2008 10:46:59 AM   
DrewE

 

Posts: 476
Joined: 28.Apr.2008
From: Cary, NC
Status: offline
It is possible, that without the ISA server authentication, GFI WebMonitor is counting individual IP addresses.  You can force the software to recount the number of active users by restarting the GFI WebMonitor service.

_____________________________

Drew Easley - Technical Support Representative
GFI Software - www.gfi.com

(in reply to lcretu)
Post #: 4
RE: users count - 22.Sep.2008 10:56:37 AM   
lcretu

 

Posts: 2
Joined: 22.Sep.2008
Status: offline
Yes, but that will be just a temporary workaround (also with a security breach). 
Eventually it will reach 500 licenses. Is there a trigger to decrease the retention time in DB? Or another mechanism that GFi will count only concurrent session? After all I'm using only 300 licenses in a precise moment of time. 


Thank you,

(in reply to DrewE)
Post #: 5
RE: users count - 23.Sep.2008 11:37:55 AM   
DrewE

 

Posts: 476
Joined: 28.Apr.2008
From: Cary, NC
Status: offline
Currently, there is nothing we can do to adjust these settings.  You may wish to open a support ticket at http://support.gfi.com so we can best assist you with licensing issues.  These type of questions are sometimes best handled in a more secure manner.  We can better understand your environment and provide individual settings that may be of assistance.

_____________________________

Drew Easley - Technical Support Representative
GFI Software - www.gfi.com

(in reply to lcretu)
Post #: 6
Page:   [1]
All Forums >> [Content Security] >> GFI WebMonitor for ISA Server >> users count Page: [1]
Jump to:





New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts


   © 2008. All rights reserved. GFI Software Home Products Download Trials Support Ordering Site Map About Us Contact us
GFI solutions: Exchange anti spam filter - exchange anti virus - isa server - network vulnerability scanner - event log management - USB security software - exchange archiving - fax server software