The log query returns no results in the Japanese version of ISA Server 2006 Management Console when the logging filter contains a string parameter and the logging is not live

In the Japanese version of Microsoft Internet Security and Acceleration (ISA) Server 2006 with Service Pack 1 (SP1) Management Console, the log query returns no results in the log viewer when the logging filter contains a string parameter and the logging is not live.

For example, the logging filter is configured as follows:

• Log record type is Firewall Logging or Web Proxy Logging.
• Log time is Last Hour.
• Source network is Internal.

In this example, the value for source network is a string parameter, and logging is not live. Therefore, the log query does not return any results.

Note This problem may also occur in the versions of ISA Server 2006 whose languages use multibyte character encoding. This problem does not occur in the English version of ISA Server 2006.

This problem occurs because of a mismatch in the conversion between Unicode and multibyte text. ISA Server Management Console uses UTF8 encoding. The ISA Server Firewall service uses the current code page.

Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base: To resolve this problem, follow these steps:

1. Install the hotfix that is mentioned in the following Microsoft Knowledge Base article:
   
   959357� Description of the ISA Server 2006 hotfix package: October 29, 2008
2. Create the following registry entry, and set the DWORD value to 1:
   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RAT\Stingray\Debug\COM\USE_ACP_FOR_FILTER

After you apply this hotfix, both ISA Server Management Console and the ISA Server Firewall service use the current code page.

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base: