Re: Unnecesary logs

Nope; the best you can do is either:
1. not log at all
2. limit the fields that are logged.

You have to realize that the ISA logs constitute "forensic data" that can be
used to prove hostile action on someone's part.  I've used them several
times to prove that very thing to ISP's.

Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG

----- Original Message -----
From: "Small Guy" <joeyng74@xxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Tuesday, October 30, 2001 23:21
Subject: [isalist] Re: Unnecesary logs


http://www.ISAserver.org


Hello Jim,

Is there a way that we can, not logged from some certain application ?

thq & regards

>From: "Jim Harrison" <jim@xxxxxxxxxxxx>
>Reply-To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
>To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
>Subject: [isalist] Re: Unnecesary logs
>Date: Tue, 30 Oct 2001 21:57:59 -0800
>
>http://www.ISAserver.org
>
>
>If it got logged, it was seen by the ISA.  ISA logs all traffic, allowed
>and
>rejected.
>Jim Harrison
>MCP(NT4, W2K), A+, Network+, PCG
>
>----- Original Message -----
>From: "Small Guy" <joeyng74@xxxxxxxxxxx>
>To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
>Sent: Tuesday, October 30, 2001 19:51
>Subject: [isalist] Unnecesary logs
>
>
>http://www.ISAserver.org
>
>
>Hello all list members,
>
>I would to whether have any of the list members have ever encounter that
>unnecessary logs have been generated. Let me explain further, I have
>configured the ISA server in integrated mode, however we are only allowing
>a
>few protocols, to go thru the internet.
>
>However, I observe that it capture a lot of unneccessary logs even though I
>have disable them on the application settings. In the logs,
>it has application like ICQ.exe, Iexplorer.exe, and etc. However the funny
>thing is there is no traffic, from these application to the Internet, but
>it
>just get logged.
>
>Is there any possibility to filter all these logs ?
>
>thq & regards
>
>_________________________________________________________________
>Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp
>
>
>------------------------------------------------------
>You are currently subscribed to this ISAserver.org Discussion List as:
>jim@xxxxxxxxxxxx
>To unsubscribe send a blank email to $subst('Email.Unsub')
>
>
>
>------------------------------------------------------
>You are currently subscribed to this ISAserver.org Discussion List as:
>joeyng74@xxxxxxxxxxx
>To unsubscribe send a blank email to $subst('Email.Unsub')


_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp


------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

Other related posts: