Reports showing IP address as Username

ptsdduke · #1 (**permalink**) 02-26-2009, 08:45 PM

We are using ASG 7.3 and ARM 4.6

When I view reports such as "Top Authenticated Users" "User by Ip Address" "Top Web Users".... anything with User, I get mixed results. Some users are listed by username, others are listed by IP address. I would like to have any User based report show only usernames. I cannot present a report to my superiors with IP addresses listed, they would look at me like I have 3 eyes.

We require proxy authentication. Authentication is pointing to edir, so in order to use the web astaro must see the username.

Any suggestions or help will be greatly appreciated.

Gohl · #2 (**permalink**) 03-23-2009, 08:20 AM

We´ve got the same Problem with AD. The Report only shows the IP-Adress.

Any idea?

We Are using ASG 7.401

garyc · #3 (**permalink**) 04-09-2009, 02:19 PM

Quote:

Originally Posted by Gohl

We´ve got the same Problem with AD. The Report only shows the IP-Adress.
Any idea?
We Are using ASG 7.401

Any resolutions?
I have that in the Reporting/Web Security Reports. I'm guessing that ARM gets it from same source. I am up to 7.306 and it is still like that. Most show usernames, some show just ip address. Trying to figure out what is different about those computers, etc. We are edirectory.
-GC

BAlfson · #4 (**permalink**) 04-09-2009, 02:28 PM

Gary, is it possible that the IPs are from PCs that are accessing the proxy in transparent mode?

garyc · #5 (**permalink**) 04-09-2009, 02:40 PM

So they could be using a PSP or not have the proxy settings in the browser and then be typing in their username and password. Or would transparent allow them to not even have to type in the username?

BAlfson · #6 (**permalink**) 04-09-2009, 03:19 PM

Yes. I started a thread last month to try to get people to make comments on setting up Profiles when using Active Directory SSO (http://www.astaro.org/astaro-gateway...-profiles.html). In that, I proposed that the base profile should be in transparent mode and have the most-stringent blocking compared to the Profiles. No one contested that, but no one specifically "blessed" that approach either.

In your case, I would think you would want a complete block and transparent mode for the base HTTP Proxy configuration, thus forcing people to correct their browser settings. The advantage of that is that you can customize the blocking message to give a link to instructions on making the browser settings. Then again, if you get rid of ANY transparent access AND you don't open port 80, you achieve a similar result, though without an immediate prompt for self-help.

In any case, it sounds like you have some good experience, so I would appreciate you adding your thoughts to the thread after you resolve your issue.

Cheers - Bob

Gohl · #7 (**permalink**) 04-14-2009, 09:06 AM

Quote:

Originally Posted by BAlfson

Gary, is it possible that the IPs are from PCs that are accessing the proxy in transparent mode?

We use the proxy withaut a login and the configuration is made in the Browser by AD.
The transparent mode is activated as Backup, if someone change his Proxy Configuration.

What could we do to get the usernames instead of the client ip-Adress

BAlfson · #8 (**permalink**) 04-14-2009, 11:56 AM

The Astaro lists the IP when the user has not been authenticated.

If a user's browser is not set to access the Astaro proxy on port 8080, the user will not be authenticated in the proxy.

If you want to force all users to authenticate, you must block usage of the transparent mode. I suggested two different ways to accomplish that in post #6 above.

Cheers - Bob