We’ve just released an auto update for the Vantage software range. This release includes some new log format additions, and some fixes to existing formats. (more…)
Posts Tagged ‘ISA Server’
Vantage Update 2.2.0.55 (Clearswift, Palo Alto Networks, WatchGuard and more)
Tuesday, October 12th, 2010
Tips from TMG Expert: Changing WebSpy Vantage Scheduled Task Recurrence Interval
Monday, July 19th, 2010
Microsoft ISA Server and Forefront TMG users are probably familiar with isaserver.org’s informative news articles, tutorials, blogs and forums. I just wanted to bring your attention to one of isaserver.org’s contributing blog authors, Richard Hicks.
Richard has been working with Forefront Threat Management Gateway (TMG) 2010 and its predecessors for more than 12 years. He has designed and deployed network security solutions using TMG and ISA for SMB’s, military and defense organizations, and Fortune 500 companies around the world.
In addition to his isaserver.org blogs, Richard has his own ISA/TMG blog where he recently posted some useful tips on changing WebSpy Vantage’s scheduled task recurrence interval using the schtasks.exe command line tool. Adding more frequent import options (i.e. hourly) is on the product roadmap but until then, using the command line tool is a great alternative.
(more…)
Why there is so much anonymous traffic in Microsoft TMG and ISA logs
Monday, July 19th, 2010
One of the most common questions we get asked by users of Microsoft TMG and ISA is why there is so much traffic attributed to the Anonymous user. Even though unauthenticated access to the web has been disabled, they still see the ‘Anonymous’ user as one of the top users in their reports.
So let’s use WebSpy Vantage to drill into that Anonymous user and find out what is going on. (more…)
Universal Log File Analyzer
Wednesday, December 30th, 2009
WebSpy analyze and report on different types of log files, from different types of network and security devices (such as web servers, web proxy servers, email server, event logs, firewalls, switches, routers, and spam and virus application), taking raw data and converting it into meaningful and actionable information.
We take great pride in this versatility and the fact that our software is virtually vendor neutral, or universal. At the time of writing our software support 128 different vendors, and more than 250 log file formats. But what does all this actually mean? What’s all this log file format gibberish and why is better to use a universal log file analyzer than a reporting solution that can only analyze a limited set of log files?
Convert Microsoft ISA 2006 MSDE logs to WebSpy compatible text logs
Monday, July 20th, 2009
Some customers have experienced issues converting their ISA MSDE logs to text using Microsoft’s MSDEToText.vbs script for ISA 2006 (available at http://www.microsoft.com/downloads/details.aspx?familyid=23531736-942f-466c-acb3-861a899d37b4&displaylang=en)
If you convert your logs to text using this script, they won’t import into WebSpy Vantage or Analyzer due to an extra line break in the header of the file (after #fields:).
We’ve therefore created a modified version of the script that creates compatible log files for WebSpy software.
Download the modified MSDEToText script:
MSDEToText.zip -26 KB
Also make sure the file names of your output log files contain the word WEB (for Web Proxy logs) or FWS (for Firewall Logs) as Analyzer and Vantage use these strings to automatically detect the type of ISA log file.
Happy converting!
Forefront Threat Management Gateway Beta 3 Now available
Friday, June 12th, 2009
A couple of weeks ago I posted a blog regarding Microsoft’s upcoming Beta 3 release of Forefront Threat Management Gateway (TMG) which will be replacing Microsoft ISA server.
Well, it’s now been released and can be downloaded from the Microsoft Download Center: (more…)
