Configuring Microsoft ISA Server

Firewall Analyzer supports Microsoft Internet Security and Acceleration (ISA) Server 2000,2004, & 2006.

Supported ISA Log Formats in Firewall Analyzer: Firewall Analyzer supports W3C extended log file format for Packet filters, ISA Server Firewall Service, and ISA Server Web Proxy Service. ISA Server File log format is supported for ISA Server Web Proxy Service only.

Configuring Microsoft ISA Server

1. Open the "ISA Management" console.
2. Select "Monitoring Configuration" from the left-hand side console tree, and then select the "Logs" folder.
3. In the "Logs" folder, right click on each of the listed component (like Packet filters, ISA Server Firewall Service, ISA Server Web Proxy Service), select "Properties" and set the log format to W3C extended log file format.

For more information, refer the Microsoft ISA Server documentation.

Once you have configured the ISA Server, then in Firewall Analyzer you can Import this log file. If you want Firewall Analyzer to periodically import the ISA Server logs use FTP import provision in "Remote Host", with the time interval less than the time interval set in the ISA Server.

Firewall Analyzer handles Dynamic Filename change of ISA Server log files.

Micosoft ISA Proxy server creates log file with new name (with time stamp appended) everyday. If the Micosoft ISA Proxy log files are to be imported, you do not have to change the filename daily, instead select the Change filename dynamically option while importing the logs. Selecting the option displays the the Filename pattern: text box to enter the time stamp pattern that the Proxy server appends when the Proxy server creates the log file daily. A help tip icon displays, (when you hover the mouse on the icon) the mapping of the Timestamp in Filename to the Pattern to be given. Enter the pattern as required.