Azure应用程序代理 - Web日志？ [英] Azure App Proxy - Web Logs?

问题描述

大家好，我们开始使用Azure AD应用程序代理前端部分可通过互联网访问的网站，而不是传统的互联网防火墙保护。  all 应用程序代理以
为前端的网站正在使用直通身份验证，因为这些网站适用于我们的Azure AD中没有帐户的外部客户端。这没有任何问题，但今天，我被要求为一个
的网站制作一些网络统计信息。他们想要的信息包含请求的来源IP，目的地IP，位置数据，网站点击次数等信息。当我在我们的网站上查看IIS日志时，所有的网络请求都来自
内部应用程序代理连接器服务器。这与防火墙提供安全性的情况有很大不同，其中IIS日志包含所有不同的源IP。有没有办法为Azure应用程序
代理提供前端网站的日志，该代理将提供Web请求的真实来源IP？

任何反馈赞赏。

     

解决方案

检查出下应用和services\Microsoft\aadapplicationproxy\connector&NBSP日志;

另外，看看你是否能看到他们的高级下日志记录：  HTTP：//blogs.iis.net/deanc/iis7-8-logging-the-real-client-ip-in-the-iis-hit-logs

Hi all, instead of the traditional internet firewall protection for a website in a DMZ, we started to front-end some of our internet-accessible websites with the Azure AD Application Proxy. All of the websites that are front-ended by the app proxy are using passthrough authentication because the websites are for external clients that don't have accounts in our Azure AD. This works without any problems, however, today, I was asked to produce some web statistical information for one of the websites. They wanted information that contains information like source IP of the request, destination IP, location data, number of hits on a website, etc. When I look on our website IIS logs, all of the web requests are sourced from the internal app proxy connector server. This is much different than when the firewall was providing security where the IIS logs contained all different source IPs. Is there a way to get logs for a website that is front-ended by the Azure app proxy which will provide the true source IPs of the web requests?

Any feedback appreciated.

     

解决方案

Check out the logs under application and services\Microsoft\aadapplicationproxy\connector 

Also, see if you can see them under the Advanced Logging: http://blogs.iis.net/deanc/iis7-8-logging-the-real-client-ip-in-the-iis-hit-logs

这篇关于Azure应用程序代理 - Web日志？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！