How do I stop ISA 2004 stopping sporadically

Posted on 2009-02-16
Last Modified: 2012-08-13
Every few days our Firewall crashes with the following error message (Event ID 14057 "... application filter module C://windows\system32\ntdll.dll generated an exception code c0000005 in address 7c81bd02 when function CompleteAsyncAccept was called"  It suggests the error can be resolved by removing recently installed application filters.  However the problem started on 3rd January this year and nothing had been installed on the computer since about 11th December.  It also throws up Event ID 1000 error message "Faulting application wspsrv.exe, faulting module ntdll.dll, fault address 0x0001bd02. It's really annoying because we loose all remote access to the server as well as loosing contact with Exchange and all emails.  Can someone tell me please how to fix this?  Thanks
Question by:MartyJW
    LVL 21

    Expert Comment

    already updated isa to the latest servicepack?
    did all your windows updates?.
    after that, rerun the 'connect to the internet wizard'.

    Author Comment

    Hi,  Thanks for those ideas. ISA is running SP3 and MS Update says no new updates are available for it.  This morning it crashed again but said the faulting module was imon.dll which seems to relate to our anti virus (NOD32) so my next plan is to check with them.  ISA restarts again with no problems but I just can't figure out why it keeps crashing.  Thanks again

    Accepted Solution

    It now appears that the problem may be caused by a conflict between ISA and a module in the Anti Virus program running on the server.  It appears the two are trying to do the same job (interrogate streaming data coming into the system).  As a result, at the Anti Virus manufacturers suggestion, I have removed the particular module as they say it is not required at this level.  All appears OK at this stage (after a reboot) so we'll see how things go over the next few days.  Here's hoping.
    LVL 2

    Expert Comment

    Just wondering, what Antivirus product was it?

    Author Comment

    The Anti Virus product is NOD32 by ESET.  A great product but seems to have this wee issue.  However we have now had no crashes for 48 hours since unloading the internet monitoring module so that is looking really hopeful.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How to improve team productivity

    Quip adds documents, spreadsheets, and tasklists to your Slack experience
    - Elevate ideas to Quip docs
    - Share Quip docs in Slack
    - Get notified of changes to your docs
    - Available on iOS/Android/Desktop/Web
    - Online/Offline

    I have been asked to explain on many, many occasions the correct way to setup network cards and DNS settings on ISA Server 2004, 2006 and forefront Threat management gateway (FTMG) and have willing done so. I have also promised my self everytime tha…
    You may have discovered the 'Compatibility View Settings' workaround for making your SBS 2008 Remote Web Workplace 'connect to a computer' section stops 'working around' after a Windows 10 client upgrade.  That can be fixed so it 'works around' agai…
    Sending a Secure fax is easy with eFax Corporate ( First, Just open a new email message.  In the To field, type your recipient's fax number You can even send a secure international fax — just include t…
    Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…

    761 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    15 Experts available now in Live!

    Get 1:1 Help Now