ISA 2006 Event 23501 - lockdown mode

bananentoast
bananentoast used Ask the Experts™
on
I get the error 23501 on my ISA Server 2006 on Windows Server 2003:

Event Type:      Warning
Event Source:      Microsoft Firewall
Event Category:      None
Event ID:      23501
Date:            1/22/2010
Time:            7:40:07 AM
User:            N/A
Computer:      ISA01
Description:
Writing to the log took approximately 17 seconds. If this time exceeds 30 seconds, logging may fail and ISA Server may go into lockdown mode. For more information, see Microsoft article 919468, at the ISA Server Help and Support site (http://support.microsoft.com/ph/2108/).

Does anybody know how to avoid an upcoming "deadlock"? I followed the microsoft KB919468 but none of the first 5 methods helped.

Does anyone know what i should do?

Thanks a lot!
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
if you have MSDE Logging enabled switch it to Text logging...

Thanks
Kumar

Author

Commented:
Should use

ISA Server file format
or
W3C extended log file format?

Thanks!
Put it in a W3C log file format.

Thanks
Kumar

Author

Commented:
Thanks, i will test it!

Commented:
this old discussion but if you still need solution I think that I have it.

If your have ISA 2006 standard edition:
- you have more then 300 users consider usage of enterprise edition because you can use only one CPU and only 2GB of RAM

in every case you should use separate partition just for logs files in order to speed up logging proces

in case that you are using ISA as Virtual Machine you should have one virtual HD on some don't so busy LUN(preferable dedicated LUN for ISA logs).

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial