Is there logs to see who is making outlook anywhere connections and what their IPs are?
We have ISA 2006 in DMZ that sends outlook anywhere connections to our two internal CAS servers. How can I see who's connecting and from what IP? Is there logs on exchange that show this?
November 8th, 2010 12:35pm

There isnt a specific log in exchange, u can see the IP addresses in the IIS logs on the CAS servers.
Free Windows Admin Tool Kit Click here and download it now
November 8th, 2010 1:29pm

You could check the monitoring in the ISA server to see what connections there is from the outside in. /MartinExchange is a passion not just a collaboration software.
November 8th, 2010 1:34pm

will those IIS logs show the user associated with the IP? Not sure how I will be able to identify who's IP it is if not.
Free Windows Admin Tool Kit Click here and download it now
November 8th, 2010 3:19pm

As I wrote, if you create a log of the ISA monitoring you should be able to see which user authenticates and from what IP they are comming from. /MartinExchange is a passion not just a collaboration software.
November 8th, 2010 3:42pm

On Mon, 8 Nov 2010 18:23:54 +0000, ZarkoC wrote: >There isnt a specific log in exchange, u can see the IP addresses in the IIS logs on the CAS servers. If ISA isn't his default gateway it may be that ISA is configured to use the ISA IP address and not the client's source address when it connects to IIS. In that case the IP address in the IIS logs isn't going to be very helpful. OTOH, if it's a small site it may be that ISA *is* the default gateway. Just sayin' that things aren't always so easy. :-) --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP
Free Windows Admin Tool Kit Click here and download it now
November 8th, 2010 5:51pm

I thought he wanted to see the incomming IP's from the clients, and those should be comming though the ISA. But other than that you are right, I normally don't use the ISA as GW on my internal networks :) /MartinExchange is a passion not just a collaboration software.
November 9th, 2010 2:03am

On Tue, 9 Nov 2010 07:02:15 +0000, mracket wrote: >I thought he wanted to see the incomming IP's from the clients, He did. >and those should be comming though the ISA. Maybe. Maybe not. >But other than that you are right, I normally don't use the ISA as GW on my internal networks :) Do you use it as your default gateway to the Internet? If not, and you have connections to ISA from the internet, you'll try to route the responses back through your default gateway instead of ISA. Asymmetric routing is rarely successful. --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP
Free Windows Admin Tool Kit Click here and download it now
November 9th, 2010 10:32pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics