Reporting improvements in Forefront TMG SP1

Forefront TMG SP1 includes some significant improvements to the reporting functionality:

- New look-and-feel for all existing reports – cleaner aesthetics that match other Forefront products.

- User Activity Report: provides detailed information about the activity of specific users.

- Reports added for new features introduced in SP1 - User Overrides and BranchCache integration.

Here are some examples of how the existing reports look after redesign:



User Activity Reports

This kind of report allows you to see the web activity of specified users. User Activity report does not take its data from the summaries, but extracts it directly from Forefront TMG logs, so the report is always up-to-date at creation time.
This is a One-Time report which means that you can’t make a recurring User Activity report.
The users can be specified by their username (e.g. contoso\evgeny) or by IP address. Forefront TMG must require user authentication in order to be able to specify users for the report by username, otherwise all web traffic will be marked as anonymous and the report can only be generated by specifying IP addresses instead of usernames.

Here is a walk-through for generating a User Activity Report:

1. Go to ‘Logs & Reports’ à Reporting Tab and click Create User Activity Report Job


2. After typing the new report name in the wizard, a Reporting Details dialog will open.
In this dialog you should choose the period of time and list of the users you want to get a report for.

The list of users (and IP addresses) should be separated by semicolons.


3. After that you need to configure publishing location and email address to send the report to, finish the wizard and click Apply the configuration.

4. Select the just created report and click Generate Selected Report.
Please note, the generation is expected to take more time than a generation of regular one-time report, since the data is taken directly from the logs rather than from summary tables.


5. And this is the report that we get:


Reports for User Override feature

User Override for blocked URL categories is a feature introduced in SP1 which allows the user to override the policy restriction when permitted and access the blocked site.
This feature has two reports:

- The first report displays which URLs were overridden most by the users. This can indicate a need to reevaluate the policy regarding these URLs.


- The second report displays a list of ‘Top overriders’ and the URLs overridden by them.
If the authentication is not enabled by access rules, IP addresses will be shown instead of user names.

- This report can indicate a possible abuse of the policy by these users and may require further investigation of the users’ actions.


Reports for BranchCache feature

This report summarizes the overall cache utilization for both the Forefront TMG cache and BranchCache. It provides an estimation of the amount of bandwidth saved by the combination of caches.


Author: Gabriel Koren, TMG Test Team

Reviewers: Roman Golubchyck, Ori Yosefi

Comments (28)

  1. Anonymous says:

    I've had TMG installed for some time now, and it has the latest Service Pack, but it has never been about to produce a report, that includes the user name, only IP address, the log files, contain username information, but the reports generated always include the IP address only, I work in a school, and IP address reports, aren't helpful, as I want to make these reports accessible to specific management staff.

  2. Bill Roland says:

    This new User Activity report looks great, but it doesn't work at all for me.  Apparently the user name is not allowed to contain a space, which all of ours do (firstname lastname).  This would seem like a major oversight, is there any chance of a fix so the report can be used for those of us with user names containing spaces?  Thanks.

  3. William Delgado says:

    Have you tried enclosing the user name in quotes: "domainjohn doe"

  4. Rudolf Torvenyi says:

    I've installed TMG2010 SP1 on W2k8 R2 server and the reporting feature desn't work. Reports are completely empty. I have found that turning off the UAC and installing a hotfix TMG-KB980311-GLB.msp should resolve the issue, for me not 🙁

  5. Bill Roland says:

    William, enclosing it in " " throws an error that its an invalid entry.  I'm hoping KB2288910 solves it.  I'm going to update tomorrow.  

  6. kageken says:

    same here for me the reports using IP Addresses work fine but through user name they come back empty

  7. Wolfgang Berns says:

    I need the new User Activity Report but this report doen´t work on my TMG2010 SP1 with Hotfix KB2288910 on my W2K8 R2. When i generate this report i seen evry Time "Error: Subreport could not be displayed" I can enter IP-Adresses or User in Format Domain%USERNAME% on both ways i see the Same error.

  8. RGSA says:

    I'm having the exact same problem than Wolfgang Berns, SP1 and all update available has been applied.

  9. Felipe Chavarro says:

    I received a hotfix yesterday from Microsoft and It fixed everything for me the issue was caused by special characters.


  10. iRamp says:


    Same problem llike Wolfgang Berns

    Error: Subreport could not be shown

    SP1 and Update 1 present.

    Has anyone found a solution?

  11. marianipa says:

    Hi, the same for me.

    Error: Subreport could not be shown

    I have it on two different servers.

    Any suggestion ?

  12. mike says:

    Hi, the same at my site. Using Sp1 + Update2 . Anyone already got some Info about this?

  13. finky says:

    Hi there, i got also the same error – is there any solution?

  14. Error fixed says:

    I'm still waiting to upgrade it SP1 but don't wanna get in trouble.

  15. jf.luque says:

    I have TMG and SP1 installed. In the reports I can see users activity report of the user that I selected OK. I am using TMG in a workgroup but created the user`s accounts in a domain so that they can be authenticated  as Web Proxy clients. The thing is that in the Session report, some of them ara authenticated as Web Proxy clients and their corresponding IP as well as SecureNat clients and their corresponding IP too. But most of them appear as SecureNAt clients, without their names.

    I would like to track the activity by ALL users name not their IP. How can I do that with TMG?

  16. Quazar says:

    Yes reporting improved significantly. After SP1 installation now I have BLANK RESULTS , awesome!! and since 6 hours searching and no solution yet!!!

  17. SW says:

    Installed SP1, Update 1 and Rollup 3

    Error: Subreport could not be shown

    Please advise.

  18. ali says:

    I have same issue. i have blank result no idea why..

  19. Ahmet YAKUPOGLU says:

    I have installed TMG 2010 and sp1 on windows 2008 it worked fine and i can get UserActivity reports

    I am serching for the way to get yser activiti in a time base (for Single User)

  20. Vishal says:

    Need date and time in User Activity report….

  21. Kwasi says:

    Please can someone explain to me why the TMG Server itself be among the highest users ?

  22. Rodge says:

    Can someone help me with my reports?’s overlapping…thanks..same in IE and Firefox.

  23. Tabrez says:

    How can i view logs by single IP or User

  24. Altamash says:

    hi , I need logs report with date and time. but we can’t . please tellme easy way from TMG-2010

  25. Fluffles says:

    Overlapping or messed up reports is (at least before SP1) due to compability issues. Load the report in IE, press F12 and choose IE 8 (or so) mode. Fixed my problems at least 🙂

  26. Simon Constable says:

    Option 1
    if you add the domain of the location of the report to your Compatibility settings in IE it will be displayed correctly,

    Option 2
    if your tick the box "Display Intranet site in Compatibility View" it will also display properly in IE

    Option 3 (not sure how to automate this one)
    Edit the htm file and add the following code into the meta data

    so the code should look like this

    All of these achieve the same solution forcing the report into compatibility mode

  27. Chin_kmtm says:

    Hi, I need your Help. Installed TMG 2010 on windows 2008R2 and updated to the latest. But from the begining TMG reports are getting overlapped. Any help appreciates…Thx.

Skip to main content