ISA2004EE Remote sql logging
- From: "emapola" <emapola@xxxxxxxxx>
- Date: 8 Dec 2005 10:50:36 -0800
Hi all,
i've installed a couple of isa 2004 enterprise edition on Windows 2003
sp1 (1 array), i've configured the logging to log externally to a
dedicated sql server.
Inside each member of the array there is a dns server that forward the
external dns request to the pubblic dns on the internet and the
internal request for the lan domains (multiple) to the correct internal
dns server.
First problem seen (i'll analyze just one of the array member because
both have exactly the same configuration), the configuration as it is
(out of the box) after a reboot log on the system event view a lot of
problem connected to the kdc, netlogon .. and so on.
I've resolved it setting manualy some services dependencies on the
registry. I've setted the isa 2004 services depend on dns service. All
it seem working fine now.
Second problem (most important one):
After i've configured the array to log to a external sql server (and
configured the appropriate system policy to allow remote logging) after
the reboot i found the firewall service stopeed. On the log i've see
some error that tell me that isa wasn't able to log externally and
close the connection. If i try to restart the firewall service manually
all work fine. Restart the firewall service manually isn't a good thing
for a array that will serve 5000 users.
Any idea regarding?
Third problem, some times people need to reboot the sql server (the one
that i use to put in isa array logs). In that situation i've see that
obviously isa close all the connection (stopping firewall service).
There are anyone that is able to write a script (i'll insert it on the
appropriate allert) that change the logging method from external sql to
internal txt mode??
And maybe another that do the opposite?
On isa 2000 it was so easy, that configuration was store on a registry
key. On isa 2004 seem to be more difficult because it use dcom object.
Best Regards
Emanuele Pola
Italy
.
- Prev by Date: Publish SSL Site
- Next by Date: Re: DMZ Question
- Previous by thread: Publish SSL Site
- Next by thread: Re: DMZ Question
- Index(es):
Relevant Pages
|
|