M86 Security M86 User Manual page 587

SR S C S C 2: C S
YSTEM ONFIGURATION ECTION HAPTER ONFIGURING THE ERVER
W
ARNINGS
The SR will generate NetBIOS requests outside the network if
IP.ID is activated and if no segment settings have been specified
in the configuration of the Web Filter—causing it to log external
traffic. To resolve this issue, the Web Filter should be modified to
log activity only within the network. If a firewall is used, it should
be set up to prevent logging NetBIOS requests outside the
network.
Be sure the time zone specified for the SR is the same for each
Web access logging device the SR uses (additional Web Filter
and/or SWG). Failure in executing this setup will cause inconsis-
tencies when users' logging times are reported, especially if IP.ID
is activated. If multiple Web access logging devices are used, be
sure to identify the subnets assigned to each of these devices, as
users cannot be tracked solely by IP address.
If using IP.ID, note that user login times are established for set
periods of 15 minutes, and if more than one user logs onto the
same machine during that time period, the activity on that
machine will be identified with the first user who logged onto that
machine. For example, the first user logs on a machine for three
minutes and then logs off. The second user logs on the same
machine for 11 minutes and then logs off. The first user logs back
on that machine for 16 minutes. All 30 minutes are logged as the
first user's activity.
559
M86 S U G
ECURITY SER UIDE