Configure logging to an SQL database

To configure logging to an SQL database

For ISA Server 2006 Enterprise Edition, do the following:

In the console tree of ISA Server Management, click Monitoring:
- Expand Microsoft Internet Security and Acceleration Server 2006, expand Arrays, expand Array_Name, and then click Monitoring.
In the details pane, click the Logging tab.
On the Tasks tab, select the appropriate task:
- Configure Firewall Logging. To configure the Firewall log.
- Configure Web Proxy Logging. To configure the Web Proxy log.
On the Log tab, select SQL Database.
Click Options, and then do the following:
- In Server, type the name of the computer running SQL Server to which the information will be logged.
- In Port, type the port number to use. The default port of the computer running SQL Server is 1433.
- In Database, type the name of the database on the computer running SQL Server.
- Select Use Windows authentication (recommended) or Use SQL server authentication.
- In User and Password, type the credentials of the account to use to authenticate this connection.

For ISA Server 2006 Standard Edition, do the following:

In the console tree of ISA Server Management, click Monitoring:
- Expand Microsoft Internet Security and Acceleration Server 2006, expand Server_Name, and then click Monitoring.
In the details pane, click the Logging tab.
On the Tasks tab, select the appropriate task:
- Configure Firewall Logging. To configure the location of the Firewall log.
- Configure Web Proxy Logging. To configure the location of the Web Proxy log.
On the Log tab, click SQL database.
Confirm or modify the following parameters:
- ODBC data source name (DSN)
- Table name
- Use this account
(Optional) If you need to change the user account, click Set Account, type the user name in User, and type the password in Password and Confirm password.

Note

To open ISA Server Management, click Start, point to All Programs, point to Microsoft ISA Server, and then click ISA Server Management.

Important

The Remote Logging (SQL) system policy configuration group must be enabled to log on to an SQL database.
For ISA Server 2006 Enterprise Edition, when applicable, we recommend that you use Windows authentication. In a workgroup deployment, if you configure SQL logging for Windows authentication, you should specify a local user account. This account must exist on all array members and on the computer running SQL Server. The account should also have appropriate logon permissions specified in SQL Server Security.
For ISA Server 2006 Enterprise Edition, if you use the default SQL port, the Allow remote SQL logging from ISA Server to selected servers system policy rule is enabled, allowing SQL access from the Local Host network to all computers on the Internal network.
We recommend that you modify the system policy so that this rule applies only to the specific computer running SQL Server. For instructions, see Edit destinations for a system policy rule.
For ISA Server 2006 Enterprise Edition, if you specify a non-default port in step 5, do the following:
1. Create a UDP and a TCP protocol for the specified port. For instructions, see Create a protocol.
2. Create an access rule from Local Host network to the network on which the computer running SQL Server is located, allowing use of the two protocols you created. For instructions, see Create an access rule.
For ISA Server 2006 Standard Edition, if you configure the DSN to use Windows authentication, grant appropriate access to the ISA Server computer. Note that in this case, credentials configured in the ISA Server Management logging properties are ignored for the specific log.