• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Event log access

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 General] >> Installation and Planning >> Event log access Page: [1]
Login
Message << Older Topic   Newer Topic >>
Event log access - 28.May2009 1:00:59 PM   
chefspike

 

Posts: 4
Joined: 27.Apr.2009
Status: offline
Our ISA server 2006 is setup, running well, and pretty well locked down.

I'm trying to figure out what I need to unlock to allow remote event log access for a log management device.  Any idea what the minimum requirements are for it to work?  I did setup a number of rules allowing access from the box to the ISA server, so I'm not seeing dropped packets... but I'm still not successfully connecting.  I don't need MS file and print services to be active, do I?

I want access to the logs, but I don't want an insecure configuration.
Post #: 1
RE: Event log access - 28.May2009 1:39:23 PM   
chefspike

 

Posts: 4
Joined: 27.Apr.2009
Status: offline
Forgot to mention config... It's an inner firewall, the 1st NIC is in our internal network, the second NIC is external to a DMZ.

(in reply to chefspike)
Post #: 2
RE: Event log access - 28.May2009 6:53:03 PM   
Jason Jones

 

Posts: 4663
Joined: 30.Jul.2002
From: United Kingdom
Status: offline
quote:

ORIGINAL: chefspike

Our ISA server 2006 is setup, running well, and pretty well locked down.

I'm trying to figure out what I need to unlock to allow remote event log access for a log management device.  Any idea what the minimum requirements are for it to work?  I did setup a number of rules allowing access from the box to the ISA server, so I'm not seeing dropped packets... but I'm still not successfully connecting.  I don't need MS file and print services to be active, do I?

I want access to the logs, but I don't want an insecure configuration.


Can you explain "pretty locked down"?

If you have created an open policy between the management server and ISA and see no denies, the problem is likely due to system hardening, and not ISA, so we need to know what you have done...

Cheers

JJ

_____________________________

Jason Jones | Forefront MVP | Silversands Ltd
My Blogs: http://blog.msedge.org.uk/ and http://blog.msfirewall.org.uk/

(in reply to chefspike)
Post #: 3

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 General] >> Installation and Planning >> Event log access Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts