Logging packets
| Archived content. No warranty is made as to technical accuracy. Content may contain URLs that were valid when originally published, but now link to sites or pages that no longer exist. |
All packets that pass through Microsoft Internet Security and Acceleration (ISA) Server can be logged to the packet filter log. You can configure exactly which packets are logged:
By default, when you install ISA Server, all dropped packets are logged to the packet filter log. When you disable packet filtering, logging is turned off altogether.
You can configure ISA Server to disable logging for packets that are dropped due to any specific block-mode IP packet filter.
You can configure ISA Server to log all packets—allowed and dropped—that are communicated by way of ISA Server. When you enable logging of allowed packets, all packets that pass through ISA Server are logged in the packet filter log.
Logging allowed packets and blocked packets causes a considerable load on the server.
For more information, see Enable logging for a specific service, Log blocked packets, and Log allowed packets.