How do I stop ISA 2004 stopping sporadically

Posted on 2009-02-16
Medium Priority
Last Modified: 2012-08-13
Every few days our Firewall crashes with the following error message (Event ID 14057 "... application filter module C://windows\system32\ntdll.dll generated an exception code c0000005 in address 7c81bd02 when function CompleteAsyncAccept was called"  It suggests the error can be resolved by removing recently installed application filters.  However the problem started on 3rd January this year and nothing had been installed on the computer since about 11th December.  It also throws up Event ID 1000 error message "Faulting application wspsrv.exe, faulting module ntdll.dll, fault address 0x0001bd02. It's really annoying because we loose all remote access to the server as well as loosing contact with Exchange and all emails.  Can someone tell me please how to fix this?  Thanks
Question by:MartyJW
  • 3
LVL 21

Expert Comment

ID: 23657433
already updated isa to the latest servicepack?
did all your windows updates?.
after that, rerun the 'connect to the internet wizard'.

Author Comment

ID: 23663521
Hi,  Thanks for those ideas. ISA is running SP3 and MS Update says no new updates are available for it.  This morning it crashed again but said the faulting module was imon.dll which seems to relate to our anti virus (NOD32) so my next plan is to check with them.  ISA restarts again with no problems but I just can't figure out why it keeps crashing.  Thanks again

Accepted Solution

MartyJW earned 0 total points
ID: 23665192
It now appears that the problem may be caused by a conflict between ISA and a module in the Anti Virus program running on the server.  It appears the two are trying to do the same job (interrogate streaming data coming into the system).  As a result, at the Anti Virus manufacturers suggestion, I have removed the particular module as they say it is not required at this level.  All appears OK at this stage (after a reboot) so we'll see how things go over the next few days.  Here's hoping.

Expert Comment

ID: 23682199
Just wondering, what Antivirus product was it?

Author Comment

ID: 23685293
The Anti Virus product is NOD32 by ESET.  A great product but seems to have this wee issue.  However we have now had no crashes for 48 hours since unloading the internet monitoring module so that is looking really hopeful.

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

So the following errors occurs in 2 ways that I am aware of at this stage, and you receive one of the following error messages: ERROR 1. When trying to save a rule: No Web listener is specified for the Web publishing rule Autodiscovery Publishin…
Because virtualization becomes more and more common, and, with Microsoft Hyper-V included in Windows Server at no additional costs, and, most server hardware nowadays is more than capable of running a physical Small Business Server (SBS) 2008 or 201…
Loops Section Overview
Whether it be Exchange Server Crash Issues, Dirty Shutdown Errors or Failed to mount error, Stellar Phoenix Mailbox Exchange Recovery has always got your back. With the help of its easy to understand user interface and 3 simple steps recovery proced…

864 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question