How To Configure Logging in Internet Security and Acceleration Server (302372)

SUMMARY

This article describes how to configure logging for Internet Security and Acceleration (ISA) Server. ISA Server provides an extensible, multiple-layer enterprise firewall and a scalable, high-performance Web cache server.

back to the top

To Configure Logging for ISA Server

There are eight procedures that you can perform to configure logging for ISA Server.

back to the top

To Configure Logging to a Database

1. In the console tree of ISA Management, click Internet Security and Acceleration Server, click Servers and Arrays, click the name of the server or array, click Monitoring Configuration, and then click Logs.
2. In the details pane, right-click the applicable service, and then click Properties.
3. On the Log tab, click Database.
4. Confirm or modify the following parameters:
   • ODBC data source (DSN)
   • Table name
   • User account

back to the top

To Configure Logging to a File

1. In the console tree of ISA Management, click Logs.
2. In the details pane, right-click the applicable service, and then click Properties.
3. On the Log tab, click File.
4. In Format, click the log format.
5. In Create new file, click a time period that specifies how often a new log file is created.

back to the top

To Compress Log Files

1. In the console tree of ISA Management, click Logs.
2. In the details pane, right-click the applicable service, and then click Properties.
3. On the Log tab, click File.
4. Click Options.
5. Click to select the Compress log files check box.

back to the top

To Set the Maximum Number of Log Files

1. In the console tree of ISA Management, click Logs.
2. In the details pane, right-click the applicable service, and then click Properties.
3. On the Log tab, click File.
4. Click Options.
5. Click to select the Limit number of log files check box, and then enter the maximum number of log files that you want to keep for the array.

back to the top

To Enable Logging for a Specific Service

1. In the console tree of ISA Management, click Logs.
2. In the details pane, right-click the applicable service, and then click Properties.
3. On the Log tab, click to select the Enable logging for this service check box.

back to the top

To Specify Fields to a Log

1. In the console tree of ISA Management, click Logs.
2. In the details pane, right-click the applicable service, and then click Properties.
3. On the Fields tab, perform one of the following tasks:
   • To select specific fields, click to select the appropriate check box.
   • To click to clear all of the check boxes in the field list, click Clear All.
   • To click to select all of the check boxes in the field list, click Select All.
   • To select a default set of fields in the ISA Server log file, click Restore Defaults.

back to the top

To Log Allowed Packets

1. In the console tree of ISA Management, click Internet Security and Acceleration Server, click Name, click Access Policy, right-click IP Packet Filters, and then click Properties.
2. On the Packet Filters tab, click to select the Log packets from 'Allow' filters check box.

back to the top

To Log Blocked Packets

1. In the console tree of ISA Management, click IP Packet Filters.
2. On the View menu, confirm that "Advanced" has a check mark symbol next to it.
3. In the details pane, right-click the block-mode Internet Protocol (IP) packet filter that you want to modify, and then click Properties.
4. On the General tab, click to select the Log any packets matching this filter check box.

back to the top