Very large log files are generated in ISA Server 2004 (837452)

SYMPTOMS

Your Microsoft Internet Security and Acceleration (ISA) Server 2004-based computer may generate very large firewall log files. Some of the log files may be 1 gigabyte (GB) or larger. These log files may fill up the hard disk where they are stored. By default, the firewall log files are stored in a compressed format in the C:\Program Files\Microsoft ISA Server\ISALogs folder.

CAUSE

This behavior may occur if the ISA Server-based computer's external adapter is connected to a network that exposes it to much NetBIOS broadcast traffic.

Note By default, the ISA Server-based computer creates daily log files.

WORKAROUND

To work around this behavior, do either one of the following:

Reduce the exposure of the external adapter to broadcasts. One method is to use a switch to connect to the network.
Turn off logging or reduce the set of fields that are logged. To change the log settings, follow these steps:
1. Click Start, point to Programs, point to Microsoft ISA Server, and then click ISA Server Management.
2. Expand ServerName, where ServerName is the name of your ISA Server-based computer.
3. Click Monitoring.
4. In the middle pane, click the Logging tab.
5. In the right Tasks pane, click Configure Firewall Logging.
6. Do either one of the following:
  - To reduce the set of fields that are logged, click the Fields tab, click to clear the check boxes for the fields that you do not want to log, and then click OK.
  - To turn off logging, click to clear the Enable logging for this service check box on the Log tab, and then click OK.