Identify Intrusions with Microsoft Proxy Server, Web Proxy Service and WinSock Proxy Service Log Fil

This is a guide on how to identify intrusions using Microsoft's Proxy Server log files. MS Proxy Server is an extensible firewall that provides passive defense against intrusions and functions as a gateway between an internal network and the Internet. This configuration allows clients to share a common connection point to the Internet. Installing a MS Proxy Server between the Internet and an internal network provides packet-filtering services that will stop various types of protocols from entering the network. With the use of MS Proxy Server log files, system administrators can monitor and track all packets passing through the MS Proxy Server.