Please don't chop the thread - it makes it difficult to follow. The ISA services *never* change startup state without external assistance. *IF* this alert is from an ISA service (doubtful), then its time to pick up the admin adjustment tool. -------------------------------------------- Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/Jim_Harrison/ http://isatools.org Read the help / books / articles! -------------------------------------------- http://www.ISAserver.org Nothing special. Only system event 7040 tells the service switched from auto to disable. Thanks, Bo Check your system and application event logs as well as your ISA monitoring alerts. What alerts & events does ISA place there? -------------------------------------------- Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/Jim_Harrison/ http://isatools.org Read the help / books / articles! -------------------------------------------- -----Original Message----- From: Tang, Bo [mailto:tangbo60@xxxxxxxxx] Sent: Tuesday, December 27, 2005 7:29 AM To: [ISAserver.org Discussion List] Subject: [isalist] isa 2004 firewall service disabled unexpectedly http://www.ISAserver.org I have an edge ISA 2004 server running on Windows 2003 Standard Edition. Recently its firewall service disabled unexpectedly. It happened one to twice a day (24 hours) randomly. Would you please tell what are possible reasons causes the problem? Best regards, All mail to and from this domain is GFI-scanned.