This article applies to:

• Mobile Client (legacy product)

Question:

Which NIC's MAC address is sent to the Mobile Filter for identification?

Reply:

When the Mobile Client is installed on a laptop computer with more than one NIC, the mobile client detects the NICS using the order they were enumerated in the operating system.  This generally results in the wired or internal NIC first, but not always.

You can view the Realtime Traffic Log on the web filter to see what MAC address the mobile client is sending to the mobile server for identification.  The MAC address will always remain the same, unless the mobile client is re-installed.

e.g.

192.168.1.4, John.Doe 00:1f:3c:93:23:6f, 2010/09/23,18:54:17, SE,0,4,, http://*.GOOGLE.COM/, http://clients1.google.com/

In the example above, the MAC address is "00:1f:3c:93:23:6f".

If you have a lot of activity in the traffic logs, and it's too difficult to locate a specific user, you might try doing a Real-Time Probe on a specific URL, and then go to that URL on the laptop.  The more obscure the URL, the better your chances of finding the specific user you're looking for.


This article was previously published as:

8e6 KB 276836