 |
|
||||||||||||||
| (PDF
version of this guide is also available for download here)
|
||||||||||||||
|
1. Introduction 1.1 How inGOT
works InGOT has two primary functions: Control and Reporting. 1.2 Control Different charges can be applied to different user types as well as different traffic types. For example, different users can be charged different rates for the same type of traffic. The traffic options are: all incoming traffic, all outgoing traffic, traffic from the proxy cache, traffic coming directly in from the Internet, international traffic, national traffic and peak or non-peak traffic. InGOT controls user Internet access by adding or removing users from a pre-defined Internet access network group. The proxy server must be configured to allow/deny access to the Internet based on a user’s membership of this group. 1.3 Reporting 1.4 Databases InGOT is shipped with three MS-Access 97 databases. If MS-Access 2000 is preferred simply open the databases in MS-Access 2000 and convert the database when prompted to do so. If MS-SQL is the preferred database environment, create a new blank database within MS-SQL. Enter the MS-SQL server name, database name, user ID and password to the inGOT configuration (for more information see Section 2.2.5). The next time inGOT is started it will detect the new blank MS-SQL database and automatically create the necessary tables. 1.5 Network
Operating Systems 1.6 Proxy Servers 1.6.1 Microsoft
Proxy Server 1.6.2 Novell
Border Manager 2. inGOT
Setup Configuration changes can be made to inGOT via the Tools/Setup menu option. There are five tabs on the setup window: General, Environment, URL Logging, network operating system settings and proxy settings. The network operating system and proxy system chosen under the Environment tab will dictate which network operating system and proxy system are displayed on these tabs. The settings are:
Notes: 1. It is not possible to select the NetWare NDS option with the Windows NT/2000/XP only version of inGOT. 2. Running the Windows NT/2000/XP and NetWare NDS version of inGOT with the Network Operating System set to NetWare NDS requires the NetWare client software to be installed on the machine running inGOT. 2.1 General Tab  2.1.1 Auto
remove user 2.1.2 Check
DB’s at start 2.1.3 Scan
on startup
2.1.4 Exit
after scan 2.1.5 Log system
messages to file 2.1.6 User
reassign by IP address NB: If this option is selected but there are no entries in the [IPAddress] database table inGOT will uncheck this option the next time a scan occurs. 2.1.7 User
reassign by URL NB: If this option is selected but there are no entries in the [URLReassign] database table inGOT will uncheck this option the next time a scan occurs. 2.1.8 Disable
top ten display 2.1.9 Display
UserID on top ten list 2.1.10 Check
network groups NB: If this option is selected but there are no entries in the [NetGroups] database table inGOT will uncheck this option the next time a scan occurs. 2.1.11 Do not
load all users into drop boxes If this option is checked, a subset of user names will be loaded into the drop boxes depending on the search criteria selected. For more information see Sections 3.1.1 and 3.3.1. 2.1.12 Auto
purge ‘Logs’ records NB: Once the log information has been purged from this table it will no longer be included in the inGOT reports. If the number of months entered is set to zero all data in the Log table will be deleted each night. This is not recommended, as no activity reporting would be available. 2.1.13 Countdown Pressing the 2.1.14 Initial
Pay Type 2.1.15 Mode NB: If inGOT is changed to Administration mode it will not be possible to change back to Scan mode from inGOT Setup. Changing the configuration back to scan mode requires the value in the MODE Key in the 'HKEY_LOCAL_MACHINE\Software\Liverton\inGOT' Key of the Windows Registry to be changed back to 0 (zero). Scan Mode Scan mode must be set to ensure inGOT scans the proxy log files and performs the necessary control and reporting functions. There should only be one copy of inGOT running in scan mode in the network. Administration Mode A limited version of inGOT can also be installed. Running inGOT in Administration mode is primarily intended for cashier type operators. Only a limited number of features are enabled when running inGOT in Administration mode. These are: · Creating a
new account Care should be taken with security access to any machine running inGOT as it is possible to add funds to any user account from any inGOT installation. The number of concurrent installs of inGOT in Administration mode is only limited by the number of database connections available. 2.1.16 Default
for New Users These default settings should be used in conjunction with the “Check network groups” option. If the “Check network groups” option is selected inGOT will use the default settings from that facility prior to assigning the default settings specified in the “Default for New Users” section of inGOT setup. For further information about the “Check network groups” option see Section 2.1.10. 2.1.17 Remove
duplicate URLs The scan duration sets the period, in hours, that scanning for duplicates should occur, e.g. if this is set to one hour then each log entry will be compared with all log entries from within the last hour. If a duplicate is found the log entry is skipped. NB: Setting this option will cause a significant increase in scan duration. Therefore this option should only be used if the specific requirement for removing duplications is needed. 2.2 Environment Tab
2.2.1 Network
Operating System 2.2.2 Default
Internet Control Group If the “Auto remove user” option is set inGOT will remove users from the ICG when their account balance goes negative. When funds are added to the user's account and their account is positive inGOT will add the user back into the ICG. For more information on “Auto remove user” see Section 2.1.1. For more information on assigning a specific Internet control group for each user see Section 5.2. 2.2.3 User
Host Suffix to Identify National Traffic Traffic to and from any site that resides in another country but has a local domain name will be considered national traffic, and vice versa. Traffic to and from a site with a URL domain name that is an IP address will be treated as international traffic. Setting the Country Suffix to “.us” will automatically include all global top level domains (i.e. “.com”, “.org” etc, as well as “.us”) as national traffic. For more information on Charge Rates see Section 4.1. 2.2.4 Proxy
System For more information on setting up MS-Proxy Server see Section 2.5. For more information on setting up Novell Border Manager logging see Section 2.7. 2.2.5 Database
System Microsoft Access If Microsoft Access is selected then the full path and filename of the MS-Access database must be entered into the User Details Database field. Microsoft SQL Server If Microsoft SQL Server is selected then several SQL configuration parameters must also be added. Set User ID
To enter the SQL server username and password press the Set User ID button. This needs to be a valid account in the Microsoft SQL Server environment, set up prior to configuring inGOT. See your Microsoft SQL Server administrator for details. Server Name This is the name of the server running Microsoft SQL Server where the inGOT database resides. Server TEMP Share and Path This setting is only used in conjunction with the Remove Duplicate URLs option (see Section 2.1.17). InGOT stores a temporary duplicated file in this directory for bulk upload to the Microsoft SQL Server Duplicate Logs table. This must be set to the administration share on the SQL server to function correctly (e.g. \\SQLServer\c$). The share name should be entered regardless of the “Remove Duplicate URLs” setting. 2.2.6 User
Details Database Microsoft Access For the Microsoft Access database environment the User Details database name should include the full path. This can be selected using the browse button adjacent to the User Details database field. Microsoft SQL Server For the Microsoft SQL Server database environment only the name of the database should be entered. This database needs to be created by the Microsoft SQL Server administrator prior to configuring inGOT. When inGOT does an integrity check of the database at start up (see Section 2.1.2) and discovers any database tables missing it will automatically create them. There is therefore no need to create or import the inGOT database tables into SQL manually . 2.2.7 Separate
Log Database Depending on the configuration of inGOT and the size of the user base, the log table does have the ability to grow considerably in size. Microsoft Access For the Microsoft Access database environment the Separate Log database name should include the full path. This can be selected using the browse button adjacent to the Separate Log Database field. Microsoft SQL Server For the Microsoft SQL Server database environment only the name of the database should be entered. This database needs to be created by the Microsoft SQL Server administrator prior to configuring inGOT. 2.3 URL Logging Tab
2.3.1 User
logging threshold 2.3.2 Logging
Options (below and above) The recommendation is to set “Summary logging” for all traffic below the specified size and “Full URL logging” for traffic over the specified size. This will ensure that any downloads of significance are recorded separately but the plethora of small web downloads does not fill up the database unnecessarily. NB: Regardless of the logging option selected, all traffic usage will continue to be calculated and funds deducted from each user’s account, based on the charging regime in place. 2.3.3 Logging
Options – No Logging 2.3.4 Logging
Options – Summary Logging NB: This is the recommended setting for logging options below the threshold setting. 2.3.5 Logging
Options – Site name logging (no URLs) 2.3.6 Logging
Options – Full URL logging NB: This is the recommended setting for logging options above the threshold setting. 2.4 NT Domain
Tab
2.4.2 Default
NT Domain 2.5 MS Proxy
Logs Tab
Microsoft Access For the Microsoft Access database environment the Microsoft Proxy Server database name should include the full path. This can be selected using the browse button adjacent to this field. Microsoft SQL Server For the Microsoft SQL Server database environment only the name of the database should be entered. This database needs to be created by the Microsoft SQL Server administrator prior to configuring inGOT. 2.6 Netware
NDS Tab
2.6.2 Default
Organisation 2.6.3 Store
Balance in NDS ‘Postal Code’ Field The ‘Postal Code’ field was chosen because there is no another suitable ‘Balance’ type field available in early versions of NDS. 2.7 Border
Manager Logs Tab
InGOT is expecting the files in the COMMON and EXTENDED folders to have the same name. Border Manager must be configured to save log files on a periodic (e.g. hourly) basis not on a log size basis. NB: The Border Manager NLM must be reloaded before changes to the BM logging configuration are activated. InGOT can scan up to six different Border Manager servers log sets. 3. User Settings 3.1 Add User
Funds
If the “Do not load all users into drop boxes” option is selected the User Name field will initially be blank. To search the database for a subset of usernames enter the first few letters of the desired username(s) and move to another field in the screen. e.g. Entering “ad” and pressing tab to move to the “Amount to Add” field will return into the “User Name” drop-down box all usernames beginning with “ad” A wildcard (*) is also available as the first character of the search. e.g. “*ad” will return all username that include “ad” in any part of the username. 3.1.2 Amount
to Add The second drop box is the Pay Type to be allocated to this payment. Selecting the correct pay type is necessary to report correctly on the payment types used. It is possible to set the initially displayed Pay Type to any one of the available Pay Types. This is done via inGOT Setup. For more information see Section 2.1.14. Additional Pay Types can be entered using the Payment Types screen via Tools/Settings/Payment Types. See Section 4.2 for more information. 3.1.3 Receipt
Number 3.1.4 User
Name 3.1.5 Balance 3.1.6 Last
Payment 3.1.7 Internet
Access For NetWare operating systems this should be the group name and context details, delimited by the period character (“.”). Fully qualified group names (using the cn= etc) are not valid entries in this field. 3.2 Add Group
Funds
3.2.1 Business
Unit An additional Business Unit option is “<All Users>”. If this Business Unit is chosen all users will have the entered amount added to their individual accounts. 3.2.2 Amount
to Add The second drop-down field is the Pay Type to be allocated to these payments. Selecting the correct Pay Type is only necessary for reporting purposes. It is possible to set the initially displayed Pay Type to any one of the available Pay Types. This is done via inGOT Setup. For more information see Section 2.1.14. Additional Pay Types can be entered using the Payment Types screen via Tools/Settings/Payment Types. For more information see Section 4.2. 3.3 User Details
3.3.1 User
Name If the “Do not load all users into drop boxes” option is selected the User Name field will be initially blank. To search the database for a subset of usernames enter the first few letters of the desired username(s) and move to another field in the screen. e.g. Entering “ad” and pressing tab to move to the “Amount to Add” field will return into the “User Name” drop-down box all usernames beginning with “ad” A wildcard (*) is also available as the first character of the search. e.g. “*ad” will return all username that include “ad” in any part of the username. 3.3.2 Full
Name To set the Full Name of a user manually press the Change Full Name button and enter a new name. Once the users full name has been entered, manually or automatically, inGOT will no longer attempt to retrieve the full name from the Domain. The user's full name will therefore not get updated in the inGOT database if it is subsequently changed in the domain. 3.3.3 User
Type To change the user type press the Change User Type button and select a new user type from the drop-down selection box.
To add a new User Type see Section 4.5. 3.3.4 Business
Unit To change the Business Unit press the Change Business Unit button and select a new business unit from the drop-down selection box.
To add a new Business Unit simply type the new business unit name into the drop-down selection box. 3.3.5 Balance 3.3.6 Access
Group 3.3.7 Last
Payment <Date (dd-mmm-yyyy)> <Time (hh:mm)> – <Payment amount> – <Payment type> - <Receipt> 3.3.8 Last
Charge <Date (dd-mmm-yyyy)> <Time (hh:mm)> – <Charge amount> – <Charge Rate> 3.3.9 Internet
Access Internet access from the perspective of inGOT is determined by whether or not the user is a member of the Internet access permission group. Their actual ability to access the Internet is determined by the proxy server reading the Internet access group and granting or denying Internet access accordingly. 3.3.10 Grant
Access 3.3.11 Deny
Access NB: If additional funds are added to the user’s account and the balance is above zero then inGOT will automatically add the user back into the Internet access group. This option should not therefore be used as a means of permanently blocking a user’s access to the Internet. 3.3.12 Delete
User To delete multiple users from the database a database delete query would need to be created and run. 4. Database
Setting There are also two options that can only be set directly from within the inGOT database. These are explained in more detail in Section 5. 4.1 Charge Rates
The Charge Rate window is where the charges are set for specific types of traffic. The Charge Rate is used in conjunction with the User Type. A Charge Rate is assigned to a User Type, which is in turn assigned to a user. To create a new Charge Rate simply enter the new name in the name field, set the charge rates and press apply. There are two sub-parts to the charge rate. If an amount is assigned to Megabytes In, users will be charged for all the incoming traffic they generate. If an amount is also assigned to one of the other incoming traffic types (e.g. Non cached International) the user will get changed this amount over and above the Megabytes In rate. The same applies for the Megabytes Out charge type. If a charge rate is applied to Megabytes Out and to either or both Megabytes Out National and Megabytes Out International the user will be charged twice, one for the Megabytes Out rate and once for either the Outgoing National or Outgoing International traffic. 4.2 Payment Types
It is possible to insert additional payment types into the inGOT database. These payment types can be used to indicate the type of payment used when entering additional funds into a user's Internet account. To add a payment type, enter the new payment type in the ‘New Payment Type’ field and the press ‘Add’ button. To delete a payment type, select the payment type and press the ‘Delete’ button. 4.3 Reassign
URL
To add a new URL enter the name of the URL into the ‘New URL’ field. If only the domain name is entered then all pages on the site will be reassigned to the listed user. If only a specific web page is to be reassigned then the complete URL, including the page name (e.g. …\index.htm), should be entered. The username that will have charges assigned to it does not need to be a valid username on the network. If it is a new name inGOT will automatically create the user details in the inGOT database, based on the default user settings. To edit a URL select the URL from the list and press the ‘Edit URL’ button. The details about particular URL will appear in the ‘New Details’ fields. Amend the necessary fields and press the ‘Save’ button. To delete a URL select the URL from the list and press the ‘Delete URL’ button. 4.4 Reassign
IP Address NB: Any computer used in this manner should be assigned a static IP address.
To add a computer, enter the IP address of the computer into the ‘New IP’ field and the name of the user to which traffic will be reassigned into the ‘New username’ field. The user name does not need to be a valid username on the network. If it is a new name inGOT will automatically create the user details in the inGOT database, based on the default user settings. To edit a listed computer select the IP Address from the list and press the ‘Edit IP’ button. The details about the particular IP Address will appear in the ‘New Details’ fields. Amend the necessary fields and press the ‘Save’ button. To delete an IP Address, select the address from the list and press the ‘Delete IP’ button. 4.5 User Type
The Off-Peak charge is set as a percentage of the charge rate listed in the [ChargeRate] table. Peak and off-peak times are set in the [PeakTimes] table in the inGOT database. For more information on [PeakTimes] see Section 5.1 The Display Colour defines the colour used when display traffic details about a particular user in the Top Ten display on the main inGOT screen. 5. Direct Table
Setting Options 5.1 Peak Times [DayofWeek] This field defines the day of the week. Day 1 to 7 is defined as Monday to Sunday. [PeakStart] This is the time when Peak Time starts. [PeakStop] This is the time when Peak Time stops. Time before [PeakStart] and time after [PeakStop] is considered Off-Peak time 5.2 NetGroups
Automatic User Profile Assignment To enable this option at least one record must exist in the [NetGroups] table and the Check network groups option set in Tools/Options. For more information on this option see Section 2.1.10. When a new user appears in the proxy log for the first time, inGOT can lookup the username in a pre-defined list of network groups (be they NT or NDS groups). If inGOT finds the user in one of the listed groups it will take the user settings as defined in the record of [NetGroups] table relating to that group and assign them to the specific user. This makes it possible to assign a different initial allocation, charge rate, user type and Internet Access control group to different group of users. The fields in the NetGroups table are: [Search Order] The order in which inGOT will search through the list of network groups. Searching is from lowest to highest. InGOT will stop searching through the list of network groups as soon as it finds the first group of which the user is a member. [GroupName] The name of the NT or NDS group that inGOT is to search. [Allocation] The initial allocation assigned to the user if the user is a member of the specific [GroupName] network group. [UserType] The UserType assigned to the user if the user is a member of the specific [GroupName] network group. [BusinessUnit] The BusinessUnit assigned to the user if the user is a member of the specific [GroupName] network group. [ACG] Optional. The ‘Access Control Group’ assigned to the user if the user is a member of the specific [GroupName] network group. This is an optional setting. If the Access Control Group field is blank the default Access Control Group as defined in inGOT Setup is used for control Internet access for the user. For more information on the default Access Control Group see Section 2.2.2. [EnteredDate] This is the date the record was entered or updated. This information is used solely for auditing purposes. [Details] Additional information about each record can be entered in this field. This information is used solely for auditing purposes. 6. Housekeeping
Routines NB: InGOT must be running at 2:00am for these routines to run. If inGOT is restarted after 2:30am it will wait until the following morning before processing these housekeeping routines. 6.1 Delete
inGOT [Logs] records If the database environment is set to Microsoft Access 97/2000 (see Section 1.4) this process will also perform a compact on the database after the purge is completed. 6.2 Delete
proxy log entries If the database environment is set to Microsoft Access 97/2000 (see Section 1.4) this process will also perform a compact on the database after the purge is completed. The removal of old Border Manager text logs should be managed via the Border Manager configuration options. 6.3 Compact
Duplicate log table |
( Scan Now) button is pressed.
 |
Last Updated 12 February 2004 |
Copyright Liverton Ltd. ©2002 |  |