Microsoft KB Archive/300211

= How to configure ISA Server 2000 to log on to a SQL Server database =

Article ID: 300211

Article Last Modified on 1/27/2006

-

APPLIES TO


 * Microsoft Internet Security and Acceleration Server 2000 Standard Edition

-



This article was previously published under Q300211



SUMMARY
This article describes the steps to set up Internet Security and Acceleration (ISA) Server to log on to SQL Server. If ISA Server computer cannot contact or log on to a SQL server, the Firewall service and the Web Proxy service cannot start.



MORE INFORMATION
To set up ISA Server to log on to SQL Server:  You must set up the SQL server with a database file for each service that you want logged from ISA Server:  On the SQL server, start Enterprise Manager. Connect to the SQL server that you want to host the database files. On the Tools menu, click SQL Query Analyzer. On the File menu, click Open. Locate &quot;ISA CD&quot;:\Isa. Open one of the following .sql files, which depends upon the ISA Server service that you want to set up to log to an SQL database: <ul> For the Firewall service, open the Fwsrv.sql file.</li> For Packet Filtering, open the Pf.sql file.</li> For the Web Proxy service, open the W3proxy.sql file.</li></ul>

NOTE: You must have a separate database for each ISA Server service on each ISA Server.

</li>  Add the following lines to the top of each script: Create database \ $ </li> Click the Database Access tab.</li> Click the databases that this logon method can access (the databases that you created earlier), and then click OK.</li></ol> </li> If you are located on a different domain than ISA Server, you must use SQL Server Authentication: <ol> The Name field is not required to have a specific name. Use a name to describe the logon method.</li> Enter a password for this logon method.</li> Click the Database Access tab.</li> Select the databases that this logon method can access (the databases that you created earlier), and then click OK.</li></ol> </li> In the left pane, expand Databases, expand the ISA Server logging database name, and then click Tables.</li> Right-click the table that will store the ISA Server data, and then click Properties.

By default, the table name for Firewall service logging is FirewallLog and the table name for Web Proxy logging is WebProxyLog.</li> On the General tab, click Permissions.</li> For the ISA_Server_Name$ computer account or for the SQL Server account, click to select the SELECT check box and the INSERT check box, and then click OK two times.</li> <li>If you ran both .sql files to generate both the FirewallLog table and the WebProxyLog table, repeat steps m through o for the second table.</li> <li>Stop and then start the SQL server service.</li></ol> </li> <li>Set up the ODBC data source on the ISA Server-based computer: <ol style="list-style-type: lower-alpha;"> <li>Under Administrative Tools, click the Data Sources (ODBC).</li> <li>Click the System DSN tab.</li> <li>Click Add.</li> <li>Click the SQL server driver.</li> <li>Click Finish.</li> <li>Name the data source with the same name that you used for the database file.</li> <li>You can enter a description or leave it blank.</li> <li>Enter the name of the SQL server.</li> <li>Click Next.</li> <li>There are two options for database authentication. These options correspond to the account that you set up in step two: <ul> <li>Click With Windows NT authentication using the network login ID to use the ISA Server-based computer account for authentication. This option can only be used in a Windows 2000 domain.</li> <li>Click With SQL Server authentication using a login ID and password entered by the user to use an SQL account for authentication.</li></ul> </li> <li>Click Next, and then use the default settings for the remainder of the wizard requests.</li></ol> </li> <li>You must set up ISA Server to log on to the SQL database: <ol style="list-style-type: lower-alpha;"> <li>Start the ISA Server Microsoft Management Console (MMC).</li> <li>Expand Monitor Configuration.</li> <li>Click Logs.</li> <li>Right-click the log that you want to set up, and then click Properties.</li> <li>On the Log tab, click Database.</li> <li>Enter the name of the data source name (DSN) that you created.</li> <li>If you used the preceding SQL Server logon method, you must enter the SQL logon method for the database that is under &quot;Use This Account&quot;. If you used Windows NT authentication, you can leave this box blank.</li> <li>Stop and then restart the services that you just set up to log on to the SQL server.</li></ol> </li></ol>

Note In SQL Server, you must also change the permissions on the tables and grant &quot;SELECT&quot; and &quot;INSERT&quot; permissions to the account that ISA Server will be using.

Keywords: kbhowto kbenv KB300211

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.