Avatar of YOlanie_Visser
YOlanie_VisserFlag for Monaco asked on

ISA Firewall Issue

Hi Guys,

I've run into an issue that's been ongoing for the past month or so, the firewall on my ISA server keeps stopping every few days, which then blocks my remote access to it and also causes all my OWA and POP3 users to lose connectivity.

it happens after I receive the following error:

The ISA Server Web filter failed to log information to MSDE Database ISALOG_20101114_WEB_000 in path C:\Program Files\Microsoft ISA Server\ISALogs. The MSDE Error description is: Unspecified error
. The problem may be resolved by restarting the MSSQL$MSFW service.


once i start the firewall, all gets back to normal.

It's currently logging to a MSDE database, I have read a couple of things and they mentioned I should rather log to a W3C DB and also reduce the number of active logs.

Any ideas on the above? This is a live system and I cant have any downtime so, experimenting is not really an option.

HELP!
Microsoft Forefront ISA Server

Avatar of undefined
Last Comment
Leon Fester

8/22/2022 - Mon
nsguruprasad

What is the ISA version? Service Pack? Did you try reapplying the service pack already installed?
SOLUTION
Leon Fester

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
See how we're fighting big data
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
Leon Fester

Tutorials on Re-configuring ISA to use a SQL db can be found on www.isaserver.org.
Downtime should be limited to restarting the Firewall service.
ASKER
YOlanie_Visser

It does not have SP1, are there any risks involved in the installation,?  like i said I cannot risk anything
Experts Exchange has (a) saved my job multiple times, (b) saved me hours, days, and even weeks of work, and often (c) makes me look like a superhero! This place is MAGIC!
Walt Forbes
Leon Fester

I've done a few remote upgrades which have completed seamlessly.
Although as a safety precaution I did have a engineer onsite incase I lost connectivity.

I've also done remote installation of ISA and it automatically creates the firewall rule enabling the host from which the installation was completed to successfully re-connect to the ISA Server after reboot.
Keith Alabaster

Lets take a step back here....

ISA - all forms - can handle upwards of 5000 active user connections so a limit of 10 connections is not relevant in this case. While in most cases the 'normal' conditions of MSDE apply, many don't as the MSDE database used is specific to ISA - this is why other systems cannot connect to it.

As asked in the very first response post - what version of ISA are you using and which service pack - if any - is applied?

What is the size of the database? Is there sufficient free disk space on the drive where the database is being held?
Have you tried backing up the configuration through the ISA gui, removing ISA and reinstalling cleanly then restoring the config back through the gui?



ASKER
YOlanie_Visser

Keith,

 - the version is 5.0.5720.157, no SP
- The logs folder is 1GB and the log files vary from 60MB to 120MB
 - there are 13.5GB of space free on the hard drive.
- I have not tried to uninstall it due to the downtime and due to my current location, I have no one on location.

I reduced the logging activity and the problem persists...it's actually gotten worse and the firewall is crashing daily and not weekly any more.


Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
ASKER
YOlanie_Visser

If I changed the DB to W3C, could this be a temp solution to this problem?
Leon Fester

@keith, I've always been an admirer of your work, so I'm not gonna argue with your knowledge.
What I've stated above is something that happened to me in a production environment, solution was applied as mentioned above. 4 years later no re-occurrence of issue.
SOLUTION
Log in to continue reading
Log In
Sign up - Free for 7 days
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
ASKER
YOlanie_Visser

Does anyone know of any program that can monitor a service in this case the Microsoft firewall, start it up if it stops ect?. I've tried the recovery option, but for some odd reason that does not work.
And need a temp solution whilst trouble shooting this problem...each time this happens all the POP and OWA users lose connectivity..
I started with Experts Exchange in 2004 and it's been a mainstay of my professional computing life since. It helped me launch a career as a programmer / Oracle data analyst
William Peck
SOLUTION
Log in to continue reading
Log In
Sign up - Free for 7 days
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
ASKER
YOlanie_Visser

SQL Express could be an option? although the DB is limited to 4 GB
ASKER
YOlanie_Visser

Would it be a very bad idea to disable the firewall logging for the time being as a temporary measure?
SOLUTION
Log in to continue reading
Log In
Sign up - Free for 7 days
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
ASKER CERTIFIED SOLUTION
Log in to continue reading
Log In
Sign up - Free for 7 days
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
ASKER
YOlanie_Visser

Would it be a very bad idea to disable the firewall logging for the time being as a temporary measure?
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
SOLUTION
Log in to continue reading
Log In
Sign up - Free for 7 days
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
ASKER
YOlanie_Visser

I guess I'll attempt changing it to text logging as a start. are there any consequences? or is it a simple changeover? will I need to restart the ISA? I've read a couple of articles where it would still carry on logging on to MSDE after it had been changed to log to W3C.

Sorry about being so paranoid, but down time is a real issue.

thanks!

SOLUTION
Log in to continue reading
Log In
Sign up - Free for 7 days
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.