Security

Ask something
Discussion Locked

ISA server log Intrution detection

0 helpful
1 reply

by surveymaster.shivaram

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

every few minutes our ISA server log shows the following message. Caould you tell me how to block this.

2004-02-16 00:35:23 68.72.161.34 - 192.168.150.200 80 SEARCH /AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA?????????????????????????????????????####??????????rmomddddddisjhnegdddddddlohddplokdepnqlojldlloskjndiimrlimddddddrfsmlgrpehggpdidjlfrjikljijljljskgkhjlipkgkjjgloqpidjndjjndfididjlddddddhdigssejlgslsskhfmlosljnddlopjlgpdelidloilspiglgpddhidikssijdhidikssijdlillipdkhdmloqpggpdidigssijdpssijedieijlohigploihflkldgqiiflokffddgsiggpmhmhenqdgpiggqodsoredgnqjkhdlpepodqdgqnhdrosegoeskirkinloinfhdgqqjjlodpholoinepdgqqlodhlodgpinoirimpgrlhfssssssniekddkpeskmdnrlsomksqdsmlsrlndrrsprrdjdddgfddddddddddddhqinmddddgdddddddhddddddssssddddolddddddddddddddhdddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddrldddddddresondrddohdmpqfeoldehppqfeihjljmkgfdkdkfjsjkkfjejqfdjgjejrjrjskhfdjfjifdkfkijrfdjmjrfdhhhsigfdjqjsjhjifrdqdqdnfhddddddddddddddnigldipkreimjomhreimjomhreimjomhmnhijkmhrgimjomhjfhijimhrgimjomhlrhjjemhrnimjomhlrhjjsmhrgimjomhreimjnmhljimjomhjfiegjmhrlimjomhrkknjdmhrdimjomhifjmjgjlreimjomhddddddddddddddddddddddddddddddddddddddddddddddddidhiddddhpdedgddjgkinpkdddddddddddddddddrddddsdedodeqloiddgdddddddedddddddmdddddndpnddddddndddddddqdddddddddhdddddeddddddddfdddddhdddddddddddddddhddddddddddddddddrddddddddhdddddddddddddgddddddddddedddddedddddddddedddddedddddddddddddedddddddddddddddddddddddddqdddddgldeddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddmdddddddeddddddddddddddddhddddddddddddddddddddddddddddldddddrdddddddddddddddddddgddddddd

1 reply

by cg it

well first off what log are your referring to? and what format? if your using the file format in notepad and not ODBC data, what is shown is a bunch for junk. Now depending upon the logging e.g. packet filter logs, Firewall service logs or web proxy logs, you should have the basic FWSEXTD, IPPEXTD & WEBXTD logs. Now you can't block logs. You can turn off logging, that that is done under monitoring configuration, logs. just uncheck the box "enable logging for this service" for whatever one you don't want to log.

This discussion is closed to new replies.