TMG Logging too much (# of HTTP Requests)

Posted on 2011-10-05
Last Modified: 2012-06-27

I have noticed the huge amount of logging done by TMG when accessing certain sites. For example, will result in hundreds of log entries when Starting a Query in TMG. This worries me because we want to log / audit nearly 500 users. Won't the logs fill up the HD space quickly?

We are using SQL server express to log, and only logging web traffic. We are not using firewall logging.
Question by:uchelpdesk
    LVL 51

    Accepted Solution

    To be frank, you should likely block those sites. Tmg HAS to log ALL web site requests that it receives. You can consciously turn this feature off for selected rules etc but that would be lunacy. It is doing what it is there for and alerting you to the fact that 'the bulls' web site is full of hidden redirects. Yukky.

    LVL 29

    Expert Comment

    Welcome to the real world of web sites.  Many websites are linked to dozens of other web sites,...the idea of going to just one single web site at a time is just a fantasy from the early 1990's.
    LVL 4

    Expert Comment

    Here are some solutions which can help you control the size of log files:

    [1] Deselect some options like Session ID, Connection ID, etc. in the Firewall Logging Properties.
    [2] Identify and select those rules (DHCP, ICMP, NetBIOS, etc.) and deselect the logging for the same.
    [3] Set the log file storage limit and retention days.

    Author Comment

    I've requested that this question be deleted for the following reason:

    no need
    LVL 51

    Expert Comment

    by:Keith Alabaster
    You have asked a question - we have answered it. I object to it being deleted.

    Featured Post

    Better Security Awareness With Threat Intelligence

    See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

    Join & Write a Comment

    Suggested Solutions

    There are three types of ISA client that can be configured - these can be individual clients or multiples of a client on each PC or server SecureNAT. A SecureNAT client for ISA server is a client machine, work station or server, that has its defa…
    Common practice undertaken by most system administrators is to document the configurations and final solutions of anything performed by them for their future use and reference. So here I am going to explain how to export ISA Server 2004 Firewall pol…
    Here's a very brief overview of the methods PRTG Network Monitor ( offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…
    In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor ( If you're interested in additional methods for monitoring bandwidt…

    729 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now