Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 807
  • Last Modified:

ISA Firewall Lockout, Ceases internet traffic

Hi Experts,

I have an intermitant issue with our firewall that ceases internet traffic. I can RDP into my firewall but cant find anything in the logs.

when I check my External NIC it is not sending or recieving any packets. if I try to disable/enable the nic that doesnt work either.

then I try to restart my ISA services through services mmc but it gets stuck at the windows firewall and takes about 20 mins to stop that service but still after that I cannot enable my nic back. this is the time I need to restart my server and then everything starts running, internet is back.

I understand it wont be an easy fix and some monitoring needs to be done but I need ideas on how to approach this.

it only happens once in 2 weeks to 4 weeks.
0
Key2IT
Asked:
Key2IT
2 Solutions
 
Keith AlabasterEnterprise ArchitectCommented:
The fact that it is intermittent suggests that it is an underlying OS/hardware issue on the the ISA Server machine rather than an ISA Server application issue. The only time ISA will actually stop traffic completely is if something has triggered an alert regarding TCP connections and you would have seen this in the alerts section if this had been the case.

Is the ISA Server host fully patched up and ISA 2006 SP1 deployed?
Is the host hardware fully updated - bios/firmware/drivers?

What is on the outside of ISA? Router? Another firewall? Anything alerting on that box? Are all conecctions forced to use the correct speed/connection type or are things left to the autonegotiate state?
0
 
Amit BhatnagarTechnology Consultant - SecurityCommented:
I would agree with Keith. I worked on a similar issues for about 3 weeks before realizing that it was a faulty NIC issue. Is the ISA dropping \Not responding to packets on both interfaces or just one?
0
 
Key2ITAuthor Commented:
Sorry guys havnt been able to reply. I'm waiting for it to crash again so I can do some more testing but hasnt dies since 9 days.
will keep you posted.

Cheers
0

Featured Post

The Firewall Audit Checklist

Preparing for a firewall audit today is almost impossible.
AlgoSec, together with some of the largest global organizations and auditors, has created a checklist to follow when preparing for your firewall audit. Simplify risk mitigation while staying compliant all of the time!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now