This particular environment does not have a monitoring system, it is a small scale deployment of everything (3 servers, 5 workstation). So the first step required constant monitoring of the event logs on the ISA server. Mostly I use it as a test bed. After almost 2 weeks of watching, I found an error in the system log that simply said "The ACPI has attempted to read or write to a memory space already in use". Then it was just matching work. I was able to twice match that error with things on the ISA server becoming unstable (such as a web rule stopped working) and in one case was able to match that error with an outright crash of the web proxy. To be sure, I had my oldest son, who is a lead programmer for Mack Trucks, come over and do a memory map for me. Sure enough, memory space Web Proxy was using was attempting to be read/write from the ACPI BIOS. As it turned out the ACPI was doing that quite often, but was rarely generating a system error. Checked for firmware, found a slightly newer version, applied it and ACPI suddenly knew how to allocate unused memory. So, the encapsulated version: If web publishing related rules, site and content rules, permissions applied to them, etc work sporadically or the system shows brief and unexplained web proxy crashes (I assume this could be any of the ISA services, it was just Web in this case) check for any system level drivers or services that might be attempting to access the same memory space. There should, at some point, be a system log entry generated that says, "'system service name' has attempted to read or write to memory space already in use" or something similar. If this is present make sure you have the latest firmware or drivers. Best Regards, Dan Bartley -----Original Message----- From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] Sent: Friday, January 23, 2004 00:59 To: [ISAserver.org Discussion List] Subject: [isalist] RE: Rebuild problems http://www.ISAserver.org What was the clicker for you? Sounds like good KB fodder, yano! Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/Jim_Harrison/ http://isatools.org Read the help / books / articles! On Thu, 22 Jan 2004 20:11:16 -0500 "Dan Bartley" <bartleyd@xxxxxxxxxxxxxxxxxxx> wrote: http://www.ISAserver.org I actually had complete trust in ISA. That was what boggled me. I've been running it for over 2 years, multiple builds and playing with rules, etc. I knew everything was right and there was no reason, from ISA's perspective, that it should not be working. Was a hard one to find though, I found one obscure error that tipped me off, took almost 2 weeks to surface. Best Regards, Dan Bartley _____ From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] Sent: Thursday, January 22, 2004 18:00 To: [ISAserver.org Discussion List] Subject: [isalist] RE: Rebuild problems http://www.ISAserver.org Hi Dan, Thanks for the follow up on this! That was quite an interesting find. Good to hear that its not ISA's fault. Poor ISA, its the "sin eater" of network connectivity issues :) Thanks! Tom _____ From: Dan Bartley [mailto:bartleyd@xxxxxxxxxxxxxxxxxxx] Sent: Wednesday, January 21, 2004 9:51 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Rebuild problems http://www.ISAserver.org Just wanted to do a final follow up on my original post for the benefit of the knowledge archives. Everything I described below was related to a problem with the web proxy. After a couple more weeks of watching and tracking errors, I discovered that the BIOS ACPI (MSI P3 motherboard) of the replacement machine was trying to read/write to memory space used by the web proxy service. It caused unpredictable behavior and occasional crash of the web proxy. BIOS update fixed the ACPI and all the errors, proxy crashes and random problems went away. Sometimes the problem is right at the front door instead of the upstairs hallway closet. I had to work at this one. Best Regards, Dan Bartley o unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: bartleyd@xxxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')