Configuring a Microsoft ISA Server

Firmware: Microsoft ISA Server 2006

Collector: File Collector

To configure a Microsoft Internet Security and Acceleration (ISA) Server to send log messages to TLC:

1. Select Start > All Programs > Microsoft ISA Server > ISA Server Management. 
2. In the left pane of the Microsoft ISA Server user interface, select Monitoring under the ISA Server to be configured (see Figure 77).

Figure 77.  Monitoring page

Monitoring page

3. In the Tasks tab in the right pane, select Configure Firewall Logging (see Figure 77).
4. In the Log tab of the Firewall Logging Properties dialog, select File and W3C extended log file format from the Format drop-down (see Figure 78).

Figure 78.  Log tab of the Firewall Logging Properties dialog

Log tab of the Firewall Logging Properties dialog

5. In the Fields tab of the Firewall Logging Properties dialog, click Select All and OK (see Figure 79).

Figure 79.  Fields tab of the Firewall Logging Properties dialog

Fields tab of the Firewall Logging Properties dialog

6. At the top of the Monitoring page, click Apply (see Figure 80).

Figure 80.  Apply button in the Monitoring page

Apply button in the Monitoring page

7. In the Tasks tab in the right pane of the Monitoring page, select Configure Web Proxy Logging.
8. In the Log tab of the Firewall Logging Properties dialog, select File and W3C extended log file format from the Format drop-down.
9. In the Fields tab of the Firewall Logging Properties dialog, click Select All and OK.
10. At the top of the Monitoring page, click Apply.

Note 

To configure the Monitored Asset for the Microsoft ISA Server (see Configuring a Monitored Asset with a File Collector), enter the following value in the File Collection tab of the Monitored Asset properties dialog: 

<ISA_Server_install>\ISALogs\*.wsc

Where <ISA_Server_install> is the ISA Server installation directory. The default location is:

C:\Program Files\Microsoft ISA Server

Next

If you are performing initial configuration of your TLC environment, see Configuring your TLC Environment.

Otherwise, see Adding a Monitored Asset for a new Log Source.