Overview

This article details relevant information to keep in mind when IP addresses or computer names are displayed in both Dashboard and reports when authentication is enabled.

Information

IP addresses are shown when a machine starts activities, e.g., antivirus updates; GFI WebMonitor will not authenticate these connections.

Computer accounts ($computername), on the other hand, are displayed when a service is trying to access an application. The activity will happen before the user is authenticated and will be registered under the computer account instead.

These requests can be blocked by a GFI WebMonitor policy, e.g., Malicious policy. In these cases, the connection will be dropped before the user attempts to authenticate.