When you view the monitored sessions in Microsoft Internet Security and Authentication (ISA) Server 2004, a question mark may appear next to a client user name. For example, a user may appear as User1 (?).
A question mark appears next to a client user name if the client computer has Firewall Client software installed, and if the ISA Server firewall policy does not require user authentication.
For more information about how to troubleshoot the logging feature in ISA Server 2004, visit the following Microsoft Web site: