topic Re: user logging with NAT in Application Networking https://community.cisco.com/t5/application-networking/user-logging-with-nat/m-p/447307#M8249 <HTML><HEAD></HEAD><BODY><P>There is no way to log end user activity except with the use of specific ACL's where you could keep track of how many hits a particular, very specific, ACL gets hit when using source/dest ip's in it. This is probably not really feasible, but the only way possible at this point on the CSS.</P><P></P><P>Regards</P><P>Pete..</P></BODY></HTML> Thu, 04 Aug 2005 12:27:00 GMT pknoops 2005-08-04T12:27:00Z user logging with NAT https://community.cisco.com/t5/application-networking/user-logging-with-nat/m-p/447304#M8246 <P>IS their a way to have logs on end user activity with a one arm design using source IP NAT.</P><P>On the end systems all connections comes from this NAT address.</P> Wed, 03 Aug 2005 14:53:37 GMT https://community.cisco.com/t5/application-networking/user-logging-with-nat/m-p/447304#M8246 cebetant 2005-08-03T14:53:37Z Re: user logging with NAT https://community.cisco.com/t5/application-networking/user-logging-with-nat/m-p/447305#M8247 <HTML><HEAD></HEAD><BODY><P>What type of hardware are we talking about here. CSM, CSS ?</P></BODY></HTML> Wed, 03 Aug 2005 15:04:00 GMT https://community.cisco.com/t5/application-networking/user-logging-with-nat/m-p/447305#M8247 pknoops 2005-08-03T15:04:00Z Re: user logging with NAT https://community.cisco.com/t5/application-networking/user-logging-with-nat/m-p/447306#M8248 <HTML><HEAD></HEAD><BODY><P>CSS</P></BODY></HTML> Thu, 04 Aug 2005 12:07:17 GMT https://community.cisco.com/t5/application-networking/user-logging-with-nat/m-p/447306#M8248 cebetant 2005-08-04T12:07:17Z Re: user logging with NAT https://community.cisco.com/t5/application-networking/user-logging-with-nat/m-p/447307#M8249 <HTML><HEAD></HEAD><BODY><P>There is no way to log end user activity except with the use of specific ACL's where you could keep track of how many hits a particular, very specific, ACL gets hit when using source/dest ip's in it. This is probably not really feasible, but the only way possible at this point on the CSS.</P><P></P><P>Regards</P><P>Pete..</P></BODY></HTML> Thu, 04 Aug 2005 12:27:00 GMT https://community.cisco.com/t5/application-networking/user-logging-with-nat/m-p/447307#M8249 pknoops 2005-08-04T12:27:00Z Re: user logging with NAT https://community.cisco.com/t5/application-networking/user-logging-with-nat/m-p/447308#M8250 <HTML><HEAD></HEAD><BODY><P>Bad news... You ask the first question because CSM could do it in some way?</P></BODY></HTML> Thu, 04 Aug 2005 12:32:57 GMT https://community.cisco.com/t5/application-networking/user-logging-with-nat/m-p/447308#M8250 cebetant 2005-08-04T12:32:57Z Re: user logging with NAT https://community.cisco.com/t5/application-networking/user-logging-with-nat/m-p/447309#M8251 <HTML><HEAD></HEAD><BODY><P>No, the CSM does not do it either, but the ACL option is not available in the CSM, so I did not want to mix things up.</P><P></P><P>Regards</P><P>Pete..</P></BODY></HTML> Thu, 04 Aug 2005 12:39:09 GMT https://community.cisco.com/t5/application-networking/user-logging-with-nat/m-p/447309#M8251 pknoops 2005-08-04T12:39:09Z Re: user logging with NAT https://community.cisco.com/t5/application-networking/user-logging-with-nat/m-p/447310#M8252 <HTML><HEAD></HEAD><BODY><P>The CSM has the HTTP header insert function that let's you insert the original client ip address into the HTTP header.</P><P>HTTP servers can then extract this value to determine the origin.</P><P></P><P>Regards,</P><P></P><P>Gilles.</P></BODY></HTML> Tue, 09 Aug 2005 06:22:06 GMT https://community.cisco.com/t5/application-networking/user-logging-with-nat/m-p/447310#M8252 Gilles Dufour 2005-08-09T06:22:06Z