Forefront Threat Management Gateway 2010 - User web proxy logging
I've been playing around with TMG 2010 inside a VM as looking at it as a free alternative to LEA websense (we have Vol licence) when they pull the free plug next year but also looking at it for replacing the last component of Ranger that we use (web montoring).
As far as I understand SP1 of TMG 2010 includes a user web tracking/reporting feature and although I can find where the report is I can't seem to get the user data to be recorded on the server.
I've setup a basic 'Web Access Policy' which blocks access to the nastys and allows to everything else but have no clue where to go from there.
Furthermore am I correct in thinking that TMG could be setup as a transparent proxy if I were to set it up as a server with two network points (one to internal and one to external (the web) connections)?