One of the big improvements with SP1 for the ISA 2006 firewall is the diagnostic logging feature. I covered diagnostic logging in my article on ISA 2006 SP1 over at http://isaserver.org/tutorials/New-ISA-Firewall-20...2.html

By default, there number of entries allowed for a query is limited to 10,000 and there is a 30 second timeout for query execution. In most cases these will be good enough. However, if you find that you’re running up against these limits, you’ll want to increase them (or in some circumstance, decrease them). Here’s how you do that:

1. Click Start and then Run. In the Run dialog box, type regedit.

2. Navigate to the following location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft

3. Right-click Microsoft, and then create the following key if it does not exist: RAT\Stingray\Debug\UI

4. To specify the maximum number of entries that the query should handle and the timeout value, do the following:

a. Right-click UI, click New, and then click DWORD(32-bit).

b. Create the following value: DIALOG_QUERY_MAX_RECORDS

c. In DIALOG_QUERY_MAX_RECORDS, specify a maximum value for the number of entries that can be handled by the query.

d. Create the following value: DIAGLOG_DLVIEWER_TIMEOUT

e. In DIAGLOG_DLVIEWER_TIMEOUT, specify the query timeout value.

For more information, check out the ISA Server 2006 SP1 feature doc at:

http://www.microsoft.com/downloads/details.aspx?di...f6ae50

HTH,

Tom

Thomas W Shinder, M.D., MCSE
Sr. Consultant / Technical Writer
Prowess Consulting www.prowessconsulting.com
PROWESS CONSULTING documentation | integration | virtualization
Email: tshinder@isaserver.org
MVP — Forefront Edge Security (ISA/TMG/UAG)