Overview

This article describes the way users are counted in GFI WebMonitor. 

Additionally, it provides relevant information that relates to what happens when GFI WebMonitor's license count is exceeded. 

Information

How does GFI WebMonitor count users?

GFI WebMonitor counts either users or IP addresses for licensing purposes. License count depends on whether the traffic being processed by GFI WebMonitor has been authenticated or not.

• For authenticated connections, WebMonitor records the username of the user making the connection.
• For unauthenticated connections, WebMonitor records the IP address of the computer making the connection.

There are situations where authenticated and unauthenticated connections are performed within the same network. In such a scenario, the following should be noted:

• When an authenticated and unauthenticated connection is made from the same machine, only one license is consumed.
• When two users each initiate an authenticated connection from the same machine, two licenses is consumed.
• When an authenticated user makes two connections from the different machine only one license is utilized.

GFI WebMonitor 2013: If GFI WebMonitor detect that the number of users is greater than the licensed number of users, all additional users/IPs above the license limit are not protected. A notification email is sent to the administrator stating that the licensed user count has been exceeded. This information is also displayed under the licensing node in the GFI WebMonitor configuration.

GFI WebMonitor 2015 and later: When WebMonitor sees more users/IPs than the license key allows, it filters them all regardless of the fact that license allows less. However, it issues an alert in the alerting center on the main dashboard informing the admin of the situation. It also alerts the Sales department to follow up on “add-on users” or IT to disable the keys if the behavior persists for extended periods of time.

The GFI WebMonitor licensing count is reset daily at midnight. You can also manually reset the WebMonitor's license by restarting the Microsoft Firewall service when using GFI WebMonitor for TMG, or the GFI Proxy service when using GFI WebMonitor Standalone Proxy version. 

Important notes to keep in mind: 

• Connections from whitelisted users or IP addresses do not consume any licenses.
• GFI WebMonitor (Standalone Proxy version) can be configured to enforce authentication. To enable enforced authentication, perform the procedure below:
  
  
  1. Open the GFI WebMonitor configuration.
  2. Expand the Configuration node and select Proxy Settings
  3. Under the Authentication method, select which authentication method you wish to use:
     
     
     • Basic authentication: This method is used if the user has to enter the username and password when launching a new Internet session. When launched, the Internet browser prompts the user to provide valid login credentials.
       
       
     • Integrated authentication (Recommended): This method of authentication is used if proxy authentication is done using the client machines' access control service. Users are not be required to enter login credentials to access the Internet.

License Count Exceeded

The behavior varies, depending on the version you are running: 

• GFI WebMonitor 2013: Users or IPs connecting after the license count has been exceeded are not protected (users or IPs that joined before the maximum number of users has been passed are still fully protected).
  
  For example, you have a 10-user license. The traffic for 10 users is filtered by WebMonitor usually. Now, the 11th user connects through WebMonitor. Since your license only allows 10 users, the 11th user will not be protected anymore. The initial 10 users, however, would still be protected.
  
  
• GFI WebMonitor 2015 and later: When WebMonitor sees more users/IPs than the license key allows, it will filter them all even though the license allows less. However, it will issue an alert in the Alerting Center of the main dashboard informing the administrator. Additionally, it will log Telemetry on this issue, enabling the Sales team to follow up on 'Add-on Users' opportunities, or IT to disable the keys if the behavior persists for long periods.

For more information, refer to GFI WebMonitor Licensing and User Count.