ISA2004EE Remote sql logging



Hi all,

i've installed a couple of isa 2004 enterprise edition on Windows 2003
sp1 (1 array), i've configured the logging to log externally to a
dedicated sql server.

Inside each member of the array there is a dns server that forward the
external dns request to the pubblic dns on the internet and the
internal request for the lan domains (multiple) to the correct internal
dns server.


First problem seen (i'll analyze just one of the array member because
both have exactly the same configuration), the configuration as it is
(out of the box) after a reboot log on the system event view a lot of
problem connected to the kdc, netlogon .. and so on.

I've resolved it setting manualy some services dependencies on the
registry. I've setted the isa 2004 services depend on dns service. All
it seem working fine now.

Second problem (most important one):

After i've configured the array to log to a external sql server (and
configured the appropriate system policy to allow remote logging) after
the reboot i found the firewall service stopeed. On the log i've see
some error that tell me that isa wasn't able to log externally and
close the connection. If i try to restart the firewall service manually
all work fine. Restart the firewall service manually isn't a good thing
for a array that will serve 5000 users.

Any idea regarding?

Third problem, some times people need to reboot the sql server (the one
that i use to put in isa array logs). In that situation i've see that
obviously isa close all the connection (stopping firewall service).

There are anyone that is able to write a script (i'll insert it on the
appropriate allert) that change the logging method from external sql to
internal txt mode??
And maybe another that do the opposite?

On isa 2000 it was so easy, that configuration was store on a registry
key. On isa 2004 seem to be more difficult because it use dcom object.

Best Regards

Emanuele Pola
Italy

.



Relevant Pages

  • Re: Cluster at W2003 for ISA server standard edition
    ... but you will need to make certificate to get the array working. ... Configuring ISA Server in an Array ... one take care for all traffice (it is active/passive configuration). ...
    (microsoft.public.windows.server.clustering)
  • Re: 2 ISAS....
    ... wo finde ich die Gruppe ISA Array Member sowie die Local ... in der Gruppe "Local Configuration Storage Server Access" ist, ...
    (microsoft.public.de.german.isaserver)
  • Re: 2 ISAS....
    ... Es ist wichtig das die FF in der Gruppe "ISA Array Member" enthalten ist und in der Gruppe "Local Configuration Storage Server Access" ist, damit das ISA Array Mitglied auf den CSS zugreifen kann. ...
    (microsoft.public.de.german.isaserver)
  • Re: VPN PPTP problem
    ... The ISA Info which I gathered from you before including all ISA ... So I had checked your ISA configuration at the beginning. ... suppose the firebox will show you a PPTP service to publish. ... Click Virtual Private Network connection, ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS R2 ISA2004 Dark Arts
    ... ISA in SBS as intended or you'll get into trouble. ... I have to get the back firewall configuration to work with the ... network in the rules/policies. ...
    (microsoft.public.windows.server.sbs)