Re: Event ID: 11011
- From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Thu, 15 Apr 2004 15:21:14 -0500
Hi Troy,
All this stuff appears on the amber monitor that Jim gets to look at
every day ;-)
Tom
Thomas W Shinder
www.isaserver.org/shinder
ISA 2004 Beta - Get it now!
http://www.microsoft.com/isaserver/beta/default.asp
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
-----Original Message-----
From: Troy Radtke [mailto:TRadtke@xxxxxxxxxxxx]
Sent: Thursday, April 15, 2004 3:14 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Event ID: 11011
http://www.ISAserver.org
Wow.... Jim.... Wow.....
Is there a whitepaper or anything on this stuff that's a complete
reference
of the keys that ISA uses and what they relate to?
Troy
-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: Thursday, April 15, 2004 3:02 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Event ID: 11011
http://www.ISAserver.org
Actually, the event isn't as cryptic as it appears.
If you position your mouth just right, hold your breath for EXACTLY
13.545
seconds and wait until the planets align (after you
release your breath; otherwise, you have to start all over), then it all
makes sense. Since it's a Standalone ISA, it 's easier because you don't
need AD-manglement tools to fix it. Here's how it breaks down:
SOFTWARE\Microsoft\Fpc\Arrays\{1B7C16F8-E9B7-4456-AAEC-26738C77BDF2}\Pub
lish
ing\PNATServerMappings\{BE62FDAC-EE0E-43A3-B6F6-EF2B8DE6D203}\ClientSets
Excl
uded
The first {GUID} identifies the array, but since there's only one in
Standalone mode, we can assume that we know which one it is. The
"\Publishing\PNATServerMappings\" is "ISA-ese" for "Server Publishing
Rules"
The second {GUID} points you to the Server Publishing Rule that's
actually
feeling the pain. Within the "
SOFTWARE\Microsoft\Fpc\Arrays\{1B7C16F8-E9B7-4456-AAEC-26738C77BDF2}\Pub
lish
ing\PNATServerMappings\{BE62FDAC-EE0E-43A3-B6F6-EF2B8DE6D203}"
key, you'll find a value called "msfpcName". This is the publishing
rule
name that you assigned when you created it.
You now have two options:
1. Since you know the name of the hurting rule, you can just delete and
recreate it from the ISA Manglement MMC (most reliable) 2. you can
change
the value of msFPCAppliesToMethod to 0 (0x00000000) and refresh ISA
manglement from teh "Array" node.
taillight warrant applies, of course...
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG http://www.microsoft.com/isaserver
http://isaserver.org/Jim_Harrison
http://isatools.org
Read the help, books and articles!
----- Original Message -----
From: "William England ( WJ Admin)" <administrator@xxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Thursday, April 15, 2004 11:43
Subject: [isalist] Re: Event ID: 11011
http://www.ISAserver.org
Hi
Will give it a shot shortly.
Apart from the client address set, should I delete all rules, being
protocol, publishing etc?
BTW, this error occurred even before I imported any rules. Occurred
straight
after the reboot I did after installing sp1
William
-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
Sent: 15 April 2004 20:26
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Event ID: 11011
http://www.ISAserver.org
Hi William,
Sounds like the old "corrupt rules" problem. If you delete the client
address set and/or the rule, it should work. Jim has had a lot of
experience
with this issue, IIRC.
HTH,
Tom
Thomas W Shinder
www.isaserver.org/shinder
ISA 2004 Beta - Get it now!
http://www.microsoft.com/isaserver/beta/default.asp
ISA Server and Beyond: http://tinyurl.com/1jq1 Configuring ISA Server:
http://tinyurl.com/1llp
-----Original Message-----
From: William England ( WJ Admin) [mailto:administrator@xxxxxxxxxxxxx]
Sent: Thursday, April 15, 2004 1:15 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Event ID: 11011
http://www.ISAserver.org
Hi
Isa and Exchange are on the same machine
Event details are
Event Type: Error
Event Source: Microsoft Firewall
Event Category: None
Event ID: 11001
Date: 1/28/2004
Time: 4:57:41 AM
User: N/A
Computer: XXX
Description:
Microsoft Firewall failed. The failure occurred during Initialization of
reverse Network Address Translation (NAT). because the configuration
property of the key
SOFTWARE\Microsoft\Fpc\Arrays\{1B7C16F8-E9B7-4456-AAEC-26738C77BDF2}\Pub
lishing\PNATServerMappings\{BE62FDAC-EE0E-43A3-B6F6-EF2B8DE6D203}\Client
SetsExcluded could not be accessed. Use the source location
2.546.3.0.1200.166 to report the failure. The error code in the Data
area of
the event properties indicates the cause of the failure. For more
information about this event, see ISA Server Help. The error description
is:
The system cannot find the file specified.
This is the same error like I am getting. Sincei have to work off a
different hard rive till I sort this issue out
Thanks for your help.
William
-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: 15 April 2004 19:44
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Event ID: 11011
http://www.ISAserver.org
Are ISA and Exch co-located?
Event log details?
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG http://www.microsoft.com/isaserver
http://isaserver.org/Jim_Harrison
http://isatools.org
Read the help, books and articles!
----- Original Message -----
From: "William England ( WJ Admin)" <administrator@xxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Thursday, April 15, 2004 08:37
Subject: [isalist] Event ID: 11011
http://www.ISAserver.org
Hi
Created a new install of Win 2K3 and E2K3.....no errors in EVT logs
Installed ISA 2000 and then SP1 and reboot
On reboot the Firewall service logs event 11011.
Tried to disable RRAS and start the Firewall service but no
go........ICS in
the advanced tab of both NIC cards is disabled.
Any help appreciated.
William
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com No.1
Exchange
Server Resource Site: http://www.msexchange.org Windows Security
Resource
Site: http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com No.1
Exchange
Server Resource Site: http://www.msexchange.org Windows Security
Resource
Site: http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
administrator@xxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com No.1
Exchange
Server Resource Site: http://www.msexchange.org Windows Security
Resource
Site: http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com No.1
Exchange
Server Resource Site: http://www.msexchange.org Windows Security
Resource
Site: http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
administrator@xxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com No.1
Exchange
Server Resource Site: http://www.msexchange.org Windows Security
Resource
Site: http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com No.1
Exchange
Server Resource Site: http://www.msexchange.org Windows Security
Resource
Site: http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tradtke@xxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
