DropConnectionOnLogError Property of the IFPCEELog Interface

The DropConnectionOnLogError property gets or sets a Boolean value that indicates whether connections are to be dropped when logging errors occur.

[C++]

HRESULT put_DropConnectionOnLogError(
	VARIANT_BOOL fDropConnection
);
HRESULT get_DropConnectionOnLogError(
	VARIANT_BOOL* pfDropConnection
);

Parameters

pfDropConnection: Pointer to a Boolean variable that is set on return to VARIANT_TRUE if connections are to be dropped when logging errors occur, or to VARIANT_FALSE if connections are not to be dropped when logging errors occur.
fDropConnection: Boolean value that indicates whether connections are to be dropped when logging errors occur.

Return Value

These property methods return S_OK if the call is successful; otherwise, they return an error code.

[Visual Basic]

Property DropConnectionOnLogError As Boolean

Property Value

Boolean value that indicates whether connections are to be dropped when logging errors occur.

Remarks

This property is read/write. Its default value is True (VARIANT_TRUE in C++).

Logging failures raise the Log failure event. This event triggers the built-in Log failure alert, whose default action shuts down the Microsoft Firewall service and causes Forefront TMG to go into lockdown mode. If the action of the Log failure alert is disabled, the Firewall service continues to run when logging failures occur. However, by default, connections are dropped when logging errors occur. This way, if Forefront TMG does not go into lockdown mode, traffic is blocked when logging failures occur, but logging and the flow of most types of traffic can resume when the condition that causes the logging failures is resolved.

When lockdown of the Firewall service due to logging failures is disabled, you can use the DropConnectionOnLogError property of the FPCLog object for each logging component to configure Forefront TMG not to drop connections when logging fails and to continue functioning without logging. This is especially important for the connection to a SQL Server database because logging cannot be resumed when the cause of a failure is resolved after this connection is dropped.

This property cannot be accessed through Forefront TMG Management.

Requirements

Client	Requires Windows Vista or Windows XP.
Server	Requires Windows Server 2008.
Version	Requires Forefront Threat Management Gateway (TMG).
IDL	Declared in Msfpccom.idl.
DLL	Requires Msfpccom.dll.