Is there logs to see who is making outlook anywhere connections and what their IPs are?
We have ISA 2006 in DMZ that sends outlook anywhere connections to our two internal CAS servers. How can I see who's connecting and from what IP? Is there logs on exchange that show this?
November 8th, 2010 12:35pm
There isnt a specific log in exchange, u can see the IP addresses in the IIS logs on the CAS servers.
Free Windows Admin Tool Kit Click here and download it now
November 8th, 2010 1:29pm
You could check the monitoring in the ISA server to see what connections there is from the outside in.
/MartinExchange is a passion not just a collaboration software.
November 8th, 2010 1:34pm
will those IIS logs show the user associated with the IP? Not sure how I will be able to identify who's IP it is if not.
Free Windows Admin Tool Kit Click here and download it now
November 8th, 2010 3:19pm
As I wrote, if you create a log of the ISA monitoring you should be able to see which user authenticates and from what IP they are comming from.
/MartinExchange is a passion not just a collaboration software.
November 8th, 2010 3:42pm
On Mon, 8 Nov 2010 18:23:54 +0000, ZarkoC wrote:
>There isnt a specific log in exchange, u can see the IP addresses in the IIS logs on the CAS servers.
If ISA isn't his default gateway it may be that ISA is configured to
use the ISA IP address and not the client's source address when it
connects to IIS. In that case the IP address in the IIS logs isn't
going to be very helpful.
OTOH, if it's a small site it may be that ISA *is* the default
gateway.
Just sayin' that things aren't always so easy. :-)
---
Rich Matheisen
MCSE+I, Exchange MVP
--- Rich Matheisen MCSE+I, Exchange MVP
Free Windows Admin Tool Kit Click here and download it now
November 8th, 2010 5:51pm
I thought he wanted to see the incomming IP's from the clients, and those should be comming though the ISA. But other than that you are right, I normally don't use the ISA as GW on my internal networks :)
/MartinExchange is a passion not just a collaboration software.
November 9th, 2010 2:03am
On Tue, 9 Nov 2010 07:02:15 +0000, mracket wrote:
>I thought he wanted to see the incomming IP's from the clients,
He did.
>and those should be comming though the ISA.
Maybe. Maybe not.
>But other than that you are right, I normally don't use the ISA as GW on my internal networks :)
Do you use it as your default gateway to the Internet? If not, and you
have connections to ISA from the internet, you'll try to route the
responses back through your default gateway instead of ISA. Asymmetric
routing is rarely successful.
---
Rich Matheisen
MCSE+I, Exchange MVP
--- Rich Matheisen MCSE+I, Exchange MVP
Free Windows Admin Tool Kit Click here and download it now
November 9th, 2010 10:32pm