Re: ISA Server crashes

  • From: umesh sk <umeshblr@xxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Fri, 1 Jul 2005 08:49:16 +0530

Hi Friends,
I came to know that the information given is not enough.Here goes the
detail description.

1) ISA server 2000 is installed in the domain member server.
2) Our domain is behind the Hardware Firewall i,e Check point.
3) We use external dns ip in the ISA server 2000 to resolve the internet domain.
4) We have not published our Domain in the internet.
5) This is the only proxy server we have.Internet access has been
given based on the ip address of the client machine.Some destination
sites are blocked.
6) Windows updates are done to till date.ISA server 2000 is also been
updated with sp2.
7)All the services related to ISA server is started.We dont have vpn
server in our company.
8) Number of users connecting to internet is around 700.Most of them
require internet access.
9) Microsoft antispyware has been installed.Mcafee antivirus is
installed.Regular updates are happening without any issues.
10) We use ISA server 2000 only as proxy server and to block certain sites.
11) Ip packet filtering is disabled.
12) And other thing is we have configured only with single NIC.

Now can anyone tell how to give task manager details.Is there any
option to export that?I dont find any strange process running in the
task manager.Mcafee did not find any virus,worms or trojans in the
server.


I have got one web proxy error which is logged in the event log of the system.

Event Type:     Error
Event Source:   Microsoft Web Proxy
Event Category: None
Event ID:       14197
Date:           6/29/2005
Time:           6:40:48 PM
User:           N/A
Computer:       INHEX-WP-03

Description:
ISA Server failed to write content to cache file. The error code in
the Data area of the event properties indicates the cause of the
failure.
Data:
0000: 05 40 00 80               .@.?    


These are the details i am giving you.So could u pls help me out to
diagnose the problem.Let me know if you require any more details.

Thanks ,
UMESH


On 7/1/05, thekevin@xxxxxxxxxxxx <thekevin@xxxxxxxxxxxx> wrote:
> http://www.ISAserver.org
> 
> WTF is  "palimanary work" ? ..........how many google hits you get on that?
> 
> Oh...you mean .............Preliminary? No Shit!
> 
> I'm still waiting on his answer to the Task Manager question.
> 
>  Yes, I did get it,3 weeks ago.
> 
> Welcome to America,
> thekevin
> 
> 
> ----- Original Message -----
> From: "John Tolmachoff (Lists)" <johnlist@xxxxxxxxxxxxxxxxxxx>
> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> Sent: Thursday, June 30, 2005 8:41 PM
> Subject: [isalist] Re: ISA Server crashes
> 
> 
> http://www.ISAserver.org
> 
> Let us review here.
> 
> Some one (umeshblr@xxxxxxxxx) posted that he is having a problem with his
> ISA server. He explained in 48 words that he has an ISA 2000 installed with
> SP2 (assuming here ISA 2000 SP2 and not Windows 2000 Server SP2) and a
> hotfix installed. (We have no idea of what hot fix, but assume it is for ISA
> Server 2000.) He said it (What exactly is it?) hangs at least every 4 hours
> (What does hang mean?) and in the event log he sees "ISA cache
> initialization failed." Going agoogling for that phrase found about 225,000
> hits.
> 
> So, out of that skimpy incomplete information you have deduced that he is
> having a major virus problem on his network.
> 
> Sorry, but there is not enough information to begin to diagnose the problem.
> More information is needed. The poster also can do some palimanary work by
> doing some research into the problem.
> 
> Get it now?
> 
> John T
> eServices For You
> 
> > -----Original Message-----
> > From: thekevin@xxxxxxxxxxxx [mailto:thekevin@xxxxxxxxxxxx]
> > Sent: Thursday, June 30, 2005 5:51 PM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] Re: ISA Server crashes
> >
> > http://www.ISAserver.org
> >
> >    I just got through learning this scenario the hard way,for about 2
> > weeks.A total of 14- 17 fresh installs on 2 seperate machines which in
> some
> > cases netted a trojan in the 1st 30 seconds of connectivity behind 2
> > isolated NAT routers.
> > The word is "prolific". I would have thought you "Black Hat" people would
> > have beat me to the punch on this one,or any other reported ISA failure.
> To
> > my knowledge,ISA has never been defeated at the External interface,leaving
> > me to further believe that his{the victim} ISA server was/is misconfigured
> > to begin with.
> 
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> thekevin@xxxxxxxxxxxx
> To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as: 
> umeshblr@xxxxxxxxx
> To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>


Other related posts: