Microsoft ISA and MARS

Unanswered Question
Mar 5th, 2009

Hello! Is there any manual how to setup Microsoft ISA and MARS in order to view a full ISA logs..I try with SNARE for isa....and i can not view nated connections on ISA in MARS......

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
dustinsuko Wed, 06/17/2009 - 12:15


Have you had any luck with this? I'm working on sending ISA logs to MARS and have had no progress.

Thank you for your time.


eegilbert Thu, 06/18/2009 - 08:33

We have one but It's not talking to MARS at present. My guess is that you would want the logs in the W3C format and that you'd have to write your own parser for it.

I've never used SNARE so I can't comment on how it would help in this situation. Their web page says it's for event log data and I'm unsure if txt files written in a directory count as this type of data.

bnidacoc Fri, 06/19/2009 - 04:32

eegilbert, is that an avoidance to snare altogether, or only for this particular application's integration?


fisko Mon, 06/22/2009 - 23:12

Snare works with win event logs...but have a problem with ISA nated connecions

eegilbert Tue, 06/23/2009 - 10:03

No, I've never used SNARE so I can not comment on it. SNARE looks like a good tool to use if you have to talk with windows boxes.

Our admins use MOM or SCOM or what ever MS is calling it these days, so they don't want to participate with MARS.



This Discussion