Differences

This shows you the differences between two versions of the page.

--- siteadmin:fticks_for_ms_nps [2024/05/20 08:00] – admin
+++ siteadmin:fticks_for_ms_nps [2024/05/20 08:53] (current) – admin
@@ Line 5: / Line 5: @@
 **This only applies to Federation Operators and not to individual sites**
-Here we provide one option for a syslog proxy server but you set up any syslog server as long as it has the following behaviour:
+The syslog server configuration below is for NXLog which is only capable of sending us a form of the Windows Event logs, not FTICKS unfortunately. Recommendations for free Windows syslog servers start and stop with NXLog and, in it's Community from, is simply unable to generate FTICKS.
+However, if you have existing software which can accept Windows Eventlogs (or otherwise access NPS logs) and change the format into FTICKS then feel free to do so. The criteria for FTICKS are:
   * Uses the [[public:fticks|FTICKS]] format
@@ Line 11: / Line 13: @@
   * Includes in the FTICKS '#FEDID=0X000#' where 0X000 is replaced by the Federation ID supplied by Jisc.
   * Filters down the proxied log to just those for
+    * Users on the govroam SSID
+    * Roams between member sites going through the ORPS
     * Successful authentications
     * Only authentications between member sites (i.e. NOT those to or from the Jisc NRPS, or within an organisation)