----------------------------------------
-- Таблицы журнала ISA должны быть такими.
-- Особенно важно наличие
--
--	[id] [bigint] IDENTITY (1, 1) NOT NULL ,
-- !!!причем в конце таблицы
-- и
--	CONSTRAINT [IX_] UNIQUE  CLUSTERED 
--	(
--		[logTime] DESC ,
--		[id] DESC 
--	) 

CREATE TABLE [WebProxyLog] (
	[ClientIP] [bigint] NULL ,
	[ClientUserName] [nvarchar] (514) COLLATE Cyrillic_General_CI_AS NULL ,
	[ClientAgent] [varchar] (128) COLLATE Cyrillic_General_CI_AS NULL ,
	[ClientAuthenticate] [smallint] NULL ,
	[logTime] [datetime] NULL ,
	[service] [smallint] NULL ,
	[servername] [nvarchar] (32) COLLATE Cyrillic_General_CI_AS NULL ,
	[referredserver] [varchar] (255) COLLATE Cyrillic_General_CI_AS NULL ,
	[DestHost] [varchar] (255) COLLATE Cyrillic_General_CI_AS NULL ,
	[DestHostIP] [bigint] NULL ,
	[DestHostPort] [int] NULL ,
	[processingtime] [int] NULL ,
	[bytesrecvd] [bigint] NULL ,
	[bytessent] [bigint] NULL ,
	[protocol] [varchar] (12) COLLATE Cyrillic_General_CI_AS NULL ,
	[transport] [varchar] (8) COLLATE Cyrillic_General_CI_AS NULL ,
	[operation] [varchar] (24) COLLATE Cyrillic_General_CI_AS NULL ,
	[uri] [varchar] (2048) COLLATE Cyrillic_General_CI_AS NULL ,
	[mimetype] [varchar] (32) COLLATE Cyrillic_General_CI_AS NULL ,
	[objectsource] [smallint] NULL ,
	[resultcode] [int] NULL ,
	[CacheInfo] [int] NULL ,
	[rule] [nvarchar] (128) COLLATE Cyrillic_General_CI_AS NULL ,
	[FilterInfo] [nvarchar] (256) COLLATE Cyrillic_General_CI_AS NULL ,
	[SrcNetwork] [nvarchar] (128) COLLATE Cyrillic_General_CI_AS NULL ,
	[DstNetwork] [nvarchar] (128) COLLATE Cyrillic_General_CI_AS NULL ,
	[ErrorInfo] [int] NULL ,
	[Action] [smallint] NULL ,
	[GmtLogTime] [datetime] NULL ,
	[AuthenticationServer] [varchar] (255) COLLATE Cyrillic_General_CI_AS NULL ,
	[id] [bigint] IDENTITY (1, 1) NOT NULL ,
	CONSTRAINT [PK_WebProxyLog] PRIMARY KEY  NONCLUSTERED 
	(
		[id]
	)  ON [PRIMARY] ,
	CONSTRAINT [IX_WebProxyLog_DateTime_ID] UNIQUE  CLUSTERED 
	(
		[logTime] DESC ,
		[id] DESC 
	)  ON [PRIMARY] 
) ON [PRIMARY]
GO


CREATE TABLE [FirewallLog] (
	[servername] [nvarchar] (128) COLLATE Cyrillic_General_CI_AS NULL ,
	[logTime] [datetime] NULL ,
	[protocol] [varchar] (32) COLLATE Cyrillic_General_CI_AS NULL ,
	[SourceIP] [bigint] NULL ,
	[SourcePort] [int] NULL ,
	[DestinationIP] [bigint] NULL ,
	[DestinationPort] [int] NULL ,
	[OriginalClientIP] [bigint] NULL ,
	[SourceNetwork] [nvarchar] (128) COLLATE Cyrillic_General_CI_AS NULL ,
	[DestinationNetwork] [nvarchar] (128) COLLATE Cyrillic_General_CI_AS NULL ,
	[Action] [smallint] NULL ,
	[resultcode] [int] NULL ,
	[rule] [nvarchar] (128) COLLATE Cyrillic_General_CI_AS NULL ,
	[ApplicationProtocol] [nvarchar] (128) COLLATE Cyrillic_General_CI_AS NULL ,
	[Bidirectional] [smallint] NULL ,
	[bytessent] [bigint] NULL ,
	[bytessentDelta] [bigint] NULL ,
	[bytesrecvd] [bigint] NULL ,
	[bytesrecvdDelta] [bigint] NULL ,
	[connectiontime] [int] NULL ,
	[connectiontimeDelta] [int] NULL ,
	[SourceProxy] [varchar] (32) COLLATE Cyrillic_General_CI_AS NULL ,
	[DestinationProxy] [varchar] (32) COLLATE Cyrillic_General_CI_AS NULL ,
	[SourceName] [varchar] (255) COLLATE Cyrillic_General_CI_AS NULL ,
	[DestinationName] [varchar] (255) COLLATE Cyrillic_General_CI_AS NULL ,
	[ClientUserName] [varchar] (514) COLLATE Cyrillic_General_CI_AS NULL ,
	[ClientAgent] [varchar] (255) COLLATE Cyrillic_General_CI_AS NULL ,
	[sessionid] [int] NULL ,
	[connectionid] [int] NULL ,
	[Interface] [varchar] (25) COLLATE Cyrillic_General_CI_AS NULL ,
	[IPHeader] [varchar] (255) COLLATE Cyrillic_General_CI_AS NULL ,
	[Payload] [varchar] (255) COLLATE Cyrillic_General_CI_AS NULL ,
	[GmtLogTime] [datetime] NULL ,
	[id] [bigint] IDENTITY (1, 1) NOT NULL ,
	CONSTRAINT [PK_FirewallLog] PRIMARY KEY  NONCLUSTERED 
	(
		[id]
	)  ON [PRIMARY],
	CONSTRAINT [PK_FirewallLog_DateTime_ID] UNIQUE  CLUSTERED 
	(
		[logTime] DESC ,
		[id] DESC 
	)  ON [PRIMARY] 
) ON [PRIMARY]
GO
-- КОНЕЦ Таблицы журнала ISA 
------------------------------------------------

------------------------------------------------
--Желательные опции базы ISA analisys
exec sp_dboption N'ISA analisys', N'autoclose', N'false'
GO

exec sp_dboption N'ISA analisys', N'bulkcopy', N'false'
GO

exec sp_dboption N'ISA analisys', N'trunc. log', N'true'
GO

exec sp_dboption N'ISA analisys', N'torn page detection', N'true'
GO

exec sp_dboption N'ISA analisys', N'read only', N'false'
GO

exec sp_dboption N'ISA analisys', N'dbo use', N'false'
GO

exec sp_dboption N'ISA analisys', N'single', N'false'
GO

exec sp_dboption N'ISA analisys', N'autoshrink', N'false'
GO

exec sp_dboption N'ISA analisys', N'ANSI null default', N'true'
GO

exec sp_dboption N'ISA analisys', N'recursive triggers', N'false'
GO

exec sp_dboption N'ISA analisys', N'ANSI nulls', N'true'
GO

exec sp_dboption N'ISA analisys', N'concat null yields null', N'true'
GO

exec sp_dboption N'ISA analisys', N'cursor close on commit', N'false'
GO

exec sp_dboption N'ISA analisys', N'default to local cursor', N'false'
GO

exec sp_dboption N'ISA analisys', N'quoted identifier', N'true'
GO

exec sp_dboption N'ISA analisys', N'ANSI warnings', N'true'
GO

exec sp_dboption N'ISA analisys', N'auto create statistics', N'true'
GO

exec sp_dboption N'ISA analisys', N'auto update statistics', N'true'
GO


exec sp_dboption N'ISA analisys', N'arithabort', N'true'
GO

if( (@@microsoftversion / power(2, 24) = 8) and (@@microsoftversion & 0xffff >= 724) )
	exec sp_dboption N'ISA analisys', N'db chaining', N'true'
GO

-- КОНЕЦ. Желательные опции базы ISA analisys
------------------------------------------------