ISA 2006: Check what DNS is being looked up

Hi All,


Our ISA server is processing 1,000's of DNS requests.

Is there a way to check what the URL is, and any suggestions on how to avoid them?
LVL 2
detox1978Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

pwindellCommented:
Avoid what?

0
detox1978Author Commented:
DNS lookups.
0
pwindellCommented:
Please formulate a detailed question that explains the situation and what you are actually trying to do or not do.  Your original post has only two lines and your second post has only two words.   Can't do anything with that.
0
Managing Security & Risk at the Speed of Business

Gartner Research VP, Neil McDonald & AlgoSec CTO, Prof. Avishai Wool, discuss the business-driven approach to automated security policy management, its benefits and how to align security policy management with business processes to address today's security challenges.

Keith AlabasterEnterprise ArchitectCommented:
The ISA WILL report a good amount of DNS traffic because it will be requesting that any url being visited by your users be resolved by the internal DNS servers so you can't really avoid this - it is by design. If it is 1000's per minute then there is a problem, if it is 1000's per month then this is not an issue.

You can use the ISA DNScache tool to view its local dns cache but logically, you can see all the the dns requests by reviewing which external web sites have been visited via the reports or the logs. Each will have a corresponding call to DNS - even if you cannot 'see' them listed.

You can often reduce the number of DNS queries by enabling caching (if you have not already done so) as then ISA will find the web pages locally rather than having to resolve the name externally for each request.

Keith
0
Keith AlabasterEnterprise ArchitectCommented:
Anything else you want to know?
0
bbaoIT ConsultantCommented:
> Your original post has only two lines and your second post has only two words.

LOL! that's true.

anyway, basically, it seems the author is looking for a way to know the detailed information about those DNS requests coming into the ISA server. if so, the answer to define a filter to view ISA logs in ISA management console.

please read the "Querying the Logs" section of the following TechNet article.

Monitoring, Logging, and Reporting Features in ISA Server 2006
http://technet.microsoft.com/en-us/library/bb794817.aspx

additionally, better install the following updates for ISA 2006 which provide more detailed information for querying ISA logs.

Microsoft Internet Security and Acceleration (ISA) Server 2006 Supportability Update
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=6f629eac-d8c6-4437-9d20-b47b02db413a

Microsoft Internet Security and Acceleration (ISA) Server 2006 Service Pack 1
http://www.microsoft.com/downloads/details.aspx?FamilyId=D2FECA6D-81D7-430A-9B2D-B070A5F6AE50&displaylang=en

hope it helps,
bbao
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Keith AlabasterEnterprise ArchitectCommented:
bbao - have you posted in the wrong question?
0
bbaoIT ConsultantCommented:
> bbao - have you posted in the wrong question?

oh? why do you say so?
0
detox1978Author Commented:
Sorry for the delay in responding my account expired soon after posting the question, so i had no way of replying.


After looking at the logs a high proprotion of the requests were for two specific site, so i added them to the HOST file.


pwindell, all the info you needed was in the question.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Anti-Virus Apps

From novice to tech pro — start learning today.