Monitor unlimited number of servers
Filter log events
Create email and web-based reports
Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content
Event ID: 9154 Source: MSExchangeSA
See ME842116 and ME895858 for additional information on this event.
2. From the Menu Select Advanced and then select the Advanced Settings
3. In the connections box confirm that the Internal Network Card is at the top of the binding order. Select OK
4. Right click on the External NIC and select Properties
5. Highlight Internet Protocol (TCP/IP) and click on the Properties button. Then click on the the Advanced button
6. On the Advanced TCP/IP Settings select the DNS Tab.
7. Remove the ISP's Ip address from DNS and leave it blank.
8. Click OK to save the Network settings.
9. Verify that the Internal network card is configured to only point to the SBS server's internal IP address for DNS using steps 4 - 8.
10. Go to Start/Programs/Administrative Tools/DNS
11. Right click on the server's name in the DNS MMC and select Properties
12. Click on the Forwarders tab. Verify that Enable forwarders is selected and that the DNS server address for the ISP are listed
13. Click OK to exit the dialog
14. Reboot the server.
Windows Event Log Analysis Splunk App
Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.
Cisco ASA Log Analyzer Splunk App
Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.