ISA 2004 anonymous in web logs....

[mullet_man]

I know nothing about ISA, anyways we have had a few incidents recently were we needed to check the logs to see which sites pupils have been visiting.

Upon checking the logs each client username is anonymous! Any ideas on how to correct this?

On checking the sessions in the monitoring section it correctly identifies client username who are currently accessing the internet.

Thanks.

Stevo.

[mrforgetful]

You need to enable authentication for the Web Proxy sessions. To do this:
ISA Management
Expand ServerName
Expand Configuration
Click Networks
Choose the 'Networks' tab
Right click 'Internal' and choose 'Properties'
Change to 'Web Proxy' tab
Click Authentication
Depending on your setup choose a method.

Presumably everyone going through your ISA should have already logged onto the network, so 'Integrated' is probably your best bet.

[mullet_man]

Thanks for the reply, although Inergrated is already set.

[mrforgetful]

Are any others checked? If so try unchecking them.

Is the 'Require all users to Authenticate' box checked? If not check it.

[mullet_man]

No others are checking, and "Require......." is checked

[Ric_]

Your rules also need to be such that ISA will bother authenticating the connection. It is easier for ISA not to authenticate a connection so this will be tried first. When this doesn't work it will authenticate the connection to see if they are permitted to use a rule.