[isapros] Re: FW: Weird ISA Rules
- From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
- To: <isapros@xxxxxxxxxxxxx>
- Date: Sat, 3 Jun 2006 20:26:18 -0700
Yep - it is interesting; as were our previous cases.
-----Original Message-----
From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx]
On Behalf Of Amy Babinchak
Sent: Saturday, June 03, 2006 7:16 PM
To: isapros@xxxxxxxxxxxxx
Subject: [isapros] Re: FW: Weird ISA Rules
They do have a backup.
Jim, I'll ask about gathering the information you requested. This
particular server doesn't have to be repaired. They are replacing is
this coming week anyway. I just thought it was an interesting case of
strange ISA happenings.
Amy
-----Original Message-----
From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx]
On Behalf Of Steve Moffat
Sent: Friday, June 02, 2006 6:40 PM
To: isapros@xxxxxxxxxxxxx
Subject: [isapros] Re: FW: Weird ISA Rules
I've also seen it happen on a vanilla SBS install....just once. Removed
and re-installed ISA and all is still ok.
They do have a back up of their ISA Rules.
S
-----Original Message-----
From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx]
On Behalf Of Jim Harrison
Sent: Friday, June 02, 2006 6:19 PM
To: isapros@xxxxxxxxxxxxx
Subject: [isapros] Re: FW: Weird ISA Rules
Sounds like a third-party plug-in.
We saw an issue like this once before with (I believe) a Trend Micro
product.
Any chance of an ISABPA & ISAInfo?
-------------------------------------------------------
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org
Read the help / books / articles!
-------------------------------------------------------
-----Original Message-----
From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx]
On Behalf Of Amy Babinchak
Sent: Friday, June 02, 2006 14:01
To: isapros@xxxxxxxxxxxxx
Subject: [isapros] FW: Weird ISA Rules
This came to me from a member of my technology network group. She's got
an ISA server where the rules have gone bonkers. It's an SBS box. She
says there were about 30 rules and now there are over 40. The additional
rules are repeats of the original ones that the installation creates but
in the description the GUID is exposed. The rules can't be disabled or
deleted. I thought maybe a corrupt registry? The server is still up and
running. No comment on whether it's still doing it job or not. She sent
me 2 bmp shots at 2MB each. I've got permission to share them with
others, if need be. Have any of you seen this before? Heard of it? Any
thoughts on what would cause a situation like this to occur?
Amy
________________________________
Hi Amy:
All of a sudden one of our ISA servers has twice as many rules as it
should have and they are weird configurations. When I try to disable or
delete the erroneous ones, I get the error message that is included in
the attached file. Have you ever seen this before? Can you tell me
what might be going on? Thanks for your help.
Wendy
All mail to and from this domain is GFI-scanned.
All mail to and from this domain is GFI-scanned.
Other related posts:
