Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Netflow with ISA server

cherry01

We installed netflow services cards in our Cisco 4506's which collect flow data from our vlans.

When I look at our ISA server I see all the internal Lan worstations in the top 40 conversations.

How can I now see what websites these workstations are visiting?

I seem to just have ISA vs workstation

Find more posts tagged with

Accepted answers

All comments

cherry01

a custom report to show endpoint vs HTTP traffic

Hammy

If I understand it correctly:

All your workstations are browsing websites via the ISA proxy, therefore it will be you ISA server that will be accessing all the websites on behalf of the workstations, not the workstations themselves. Connections (netflow ?) will show workstation<--> ISA and ISA<-->websites

You should be able to get reports on user/workstation activity directly from the ISA server itself.

HammY

awill9422

Cherry01,

Have you found any answers on how to get the websites from ISA? I have similar issues but mine is with websense as our proxy. Let me know if you had any success.

Hammy

Websense is not a proxy server, but an URL filtering system which has an extensive reporting system for permitted and denied sites.

awill9422

Hammy, My websense server uses my ISA server as the proxy, that is why I ask Cherr01 if the issue was resolved.