ISA Server 2006 Service Pack 1 introduces a new alert that is named "Client Authentication Time Exceeded"

Const SE_VPS_GUID = "{143F5698-103B-12D4-FF34-1F34767DEabc}"
Const SE_VPS_NAME1 = "FireSlowAuthenticationEventAuthenticationDurationThresholdSeconds"
Const SE_VPS_VALUE1 = 6
Const SE_VPS_NAME2 = "FireSlowAuthenticationEventIntervalDurationMinutes"
Const SE_VPS_VALUE2 = 5
Const SE_VPS_NAME3 = "FireSlowAuthenticationEventAfterNumTimesInInterval"
Const SE_VPS_VALUE3 = 20

Sub SetValue()

' Create the root obect.
Dim root ' The FPCLib.FPC root object
Set root = CreateObject("FPC.Root")

'Declare the other objects needed.
Dim array ' An FPCArray object
Dim VendorSets ' An FPCVendorParametersSets collection
Dim VendorSet ' An FPCVendorParametersSet object

' Get references to the array object
' and the network rules collection.
Set array = root.GetContainingArray
Set VendorSets = array.VendorParametersSets

On Error Resume Next
Set VendorSet = VendorSets.Item( SE_VPS_GUID )

If Err.Number <> 0 Then
Err.Clear

' Add the item
Set VendorSet = VendorSets.Add( SE_VPS_GUID )
CheckError
WScript.Echo "New VendorSet added... " & VendorSet.Name

Else
WScript.Echo "Existing VendorSet found... current values: " & vbCrLf & _
SE_VPS_NAME1 & " = " & VendorSet.Value(SE_VPS_NAME1) & vbCrLf & _
SE_VPS_NAME2 & " = " & VendorSet.Value(SE_VPS_NAME2) & vbCrLf & _
SE_VPS_NAME3 & " = " & VendorSet.Value(SE_VPS_NAME3)
End If

VendorSet.Value(SE_VPS_NAME1) = SE_VPS_VALUE1
If Err.Number <> 0 Then CheckError
VendorSet.Value(SE_VPS_NAME2) = SE_VPS_VALUE2
If Err.Number <> 0 Then CheckError
VendorSet.Value(SE_VPS_NAME3) = SE_VPS_VALUE3
If Err.Number <> 0 Then CheckError

VendorSets.Save false, true
CheckError

If Err.Number = 0 Then
WScript.Echo "Done, saved!"
End If

End Sub

Sub CheckError()

If Err.Number <> 0 Then
WScript.Echo "An error occurred: 0x" & Hex(Err.Number) & " " & Err.Description
Err.Clear
End If

End Sub

SetValue