Hello,
after upgrading to 8.2 and reading about the vaunted new report system that should eliminate seeing useless IP addresses in reports i find that it still does just that...
letme be more clear:
in network security, i see resolved hostnames all over.
ASG is joined to the domain and is also using AD SSO
DNS forwarder is set to the AD DC IP first, there's also a static route for the FQDN of the domain pointing to the server.
Web proxy set as transparent with no authentication(agent is not transparent, browser is intrusive) but it should resolve the hostname per the release notes...
but no, all i see are IP addresses.
Also, there are big inconsistencies in traffic reports for web security
in top applications i have:
MegaUpload 1.7 GB 62.85
and i know this is correct for a fact, so then i look into Top User by time, which should show which user downloaded that and i get:
Total unique users: 5
Total traffic: 75.0 MB
wait... ¿what?, 75MB=1.7GB? where have the 1.63 remaining GB went?, ninja user? [:S]
And those 75MB are totally fake as there is like 120MB of facebook traffic as well.
Also, the top users is again showing only IP addresses which are useless, where are the resolved hostnames?
and the inconsistencies go further, in top site by traffic:
Total unique domains: 252
Total traffic: 1.0 GB
Site Traffic %
1 megaupload.com 845.9 MB 79.19
again, where has the other half of the traffic gone? [:S]
at this point i can't trust those meters at all, how am i supposed to keep real track of who consumes what?
This thread was automatically locked due to age.
Guest User!
You are not Sophos Staff.
