70-350 Implementing Microsoft Internet Security and Acceleration (ISA) Server 2004 Training Boot Camp

Demo Question 8.

You work as the network administrator at EliteCertify.com. The EliteCertify.com network consists of a single Active Directory domain named EliteCertify.com. The client computers at EliteCertify.com are running Windows XP Professional. EliteCertify.com contains a Development department. The EliteCertify.com network contains an ISA Server 2004 computer named EliteCertify -SR14 which gives Internet access to the employees of the Development department. You have configured the client computers that connect to the network as SecureNAT clients. You also create an access rule on EliteCertify -SR14 that allows all users access to all protocols on the External network. After the creation of the access rule, you view the Firewall log and the Web Proxy filter log on EliteCertify -SR14 and notice that the URLs of Web sites visited by Development employees are not displayed. You need to ensure that the URLs of Web sites visited by employees are displayed in the EliteCertify -SR14 log files. What should you do?

A. You need to configure all network computers as Web Proxy clients.
B. You need to configure all network computers as Firewall clients.
C. You need to configure EliteCertify -SR14 to require authentication for Web requests.
D. You need to configure EliteCertify -SR14 to require authentication for all protocols.


Display Answer

Answer: A

Explanation: The user name is only included in Firewall and Web Proxy logs when a client sends that information to the ISA firewall. A client piece is always required to send user information to the firewall since there are no provisions in the layer 1 through 6 headers to provide this information. Only the Firewall client and Web Proxy client configurations can send user information to the ISA firewall and have this information included in the log files. SecureNAT client connections allow for logging of the source IP address, but user information is never recorded for machines configured as only SecureNAT clients. Note that there is no option to log the URL in the Firewall Logging Properties. The reason for this is that the Firewall client doesn't send the URL for Web sites accessed via the Firewall client. However you can fix this by correctly setting up the Web proxy client configuration.