HTTPS Publishing Unexpectedly Not Working

3GKID
3GKID used Ask the Experts™
on
Hi,

I am running an ISA 2004 Server on a 2003 SP2 box.  This box is publishing HTTPS for OWA  and I noticed that sometimes OWA would be unresponsive from the outside.  On closer inspection, the ISA service would get a "Resource Allocation Conflict" error message under monitoring.  

I did some research and running  "netstat -ano | findstr :443" produces

    TCP        192.168.1.2:443         0.0.0.0                      LISTENING      3648


Going to task manager and looking up process ID 3648 brings up the wspsrv.exe service.

A reboot of the  box will fix the issue until it reoccurs.  The box does not run IIS or anything else that I can think of that would host HTTPS services.  It has been running just great for years until recently.

Any ideas?

Thanks.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Why is my suggestion being ignored?

Author

Commented:
Hi,

Sorry for the late response.  Actually it was the exact post that you linked I initially followed.  I don't have IIS running on the ISA box.  The thing is the box has been publishing well for years now without any issues.  It was only recently some users complained about owa.  Restarting the box or the firewall service will fix the issue, then it reoccurs several hours later.  Any other ideas?

Thanks a lot.
11/26 Forrester Webinar: Savings for Enterprise

How can your organization benefit from savings just by replacing your legacy backup solutions with Acronis' #CyberProtection? Join Forrester's Joe Branca and Ryan Davis from Acronis live as they explain how you can too.

So the firewall is inserting a conflict on its own?

Author

Commented:
Hi,

Not too sure where the conflict comes from since the rules have been unchanged.  I actually came across the exact same article that you referenced in your post before I posted here.  The only difference is I do NOT have IIS installed on the ISA box.  It hasn't happened again since I restarted the MSFW service yesterday.  I just now modified the alert definitions so that I will be emailed when this happens.  As to why this is happening, I am still clueless.

Thanks.
I'm struck that rebooting the firewall fixes it at first. The reboot of the system reboots the firewall, so it adds weight to the firewall being the problem. Can you sort the firewall rules by date after the conflict occurs to see what the last added rule is?

Author

Commented:
I don't understand.  The rules don't have any dates attached to them.  The rules have been unchanged for years.

Author

Commented:
Hi,

For some reason, I notice this happening less these days since the email notifications for this error have been enabled.

Author

Commented:
Hi,<br /><br />I never got this resolved.  Don't know why.  Checked everything and it seems to be good.  Apart from blowing away the box and starting fresh, can't think of anything else to do.
I apologize for not responding, I never saw that you had replied. My question was to determine if a virus was adding rules without your knowing it. Good luck with the rebuild.

Author

Commented:
There aren't any extra rules in the list.  I ran a virus scan on the box and nothing came up.  I want to avoid rebuilding at all cost since I really don't have the time to do this and it will not solve why this happened in the first place.  Rebuilding is the quitter's way out.

Thanks.
lol you must be a lot younger than me. Rebuilding is the expedient way out. Solve the problem, no one's keeping score. Operating systems are hideously complex, there's no way one human can know all of the combinations.

Having said that, there are some things it's likely to be and it could be worth it to troubleshoot it before rebuilding.

I'm out of my area of expertise but I did find some very interesting similar problems. I hope these threads help.

http://forums.isaserver.org/m_2002033375/mpage_1/key_/tm.htm#2002034078
http://forums.isaserver.org/m_2002098163/mpage_1/key_/tm.htm#2002098174

http://social.technet.microsoft.com/Forums/en-US/ForefrontedgePub/thread/773fb19c-f9ea-4056-bec9-83016ae14fcb

Did you go to isaserver.org?

Sorry I can't be of more help.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial