• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

RDP packets dropped with 0x80070008 error (NOT ENOUGH MEMORY)

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 Firewall] >> General >> RDP packets dropped with 0x80070008 error (NOT ENOUGH MEMORY) Page: [1]
Login
Message << Older Topic   Newer Topic >>
RDP packets dropped with 0x80070008 error (NOT ENOUGH M... - 25.Nov.2008 8:20:16 AM   
wladzislaw

 

Posts: 1
Joined: 25.Nov.2008
Status: offline
ISA Gurus, help please. I'm in panic and do not know what to do/

We have a branch office connected to hq by VPN (IPSec tunnel) Both at hq and the branch we have ISA 2006 SP1. The trouble is thet sometimes while connecting by RDP protocol (terminal server in hq) branch ISA, or hq ISA drops RDP packets with 0x80070008 error NOT ENOUGH MEMORY. But both ISA servers had more than 200Mb free physical memory.

Will be thankfull for any advice!
Post #: 1
RE: RDP packets dropped with 0x80070008 error (NOT ENOU... - 30.Nov.2008 10:27:04 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
You say "sometimes" -- when does this happen and when does it not happen? If you can identify the differences you should have the answer to your problem.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to wladzislaw)
Post #: 2
RE: RDP packets dropped with 0x80070008 error (NOT ENOU... - 19.Dec.2008 4:27:30 AM   
tomers@tomers.co.il

 

Posts: 41
Joined: 1.Nov.2006
Status: offline
Hi Tom.

I Have the same issue with dhcp relay packets.
I Have ISA 2006 Enterprise whith dhcp relay configured no the routing and remote access service.
I have a few Branches that are all connected with IPVPN and they all come to the ISA through the same network/interface. On another network/interface I have the servers segment with the dhcp server, configured with Superscopes.
All the branches works fine except one. When a client tries to get an IP address from the DHCP server, through the dhcp relay that resides on the ISA machines I get errors like 0x80070008 ERROR_NOT_ENOUGH_MEMORY.
What could it be ?  I remind you that I have something like 10 more branches on the same network on the same side of the ISA. all working just fine..

(in reply to tshinder)
Post #: 3
RE: RDP packets dropped with 0x80070008 error (NOT ENOU... - 19.Dec.2008 9:47:30 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Is this a ISA site to site VPN?

Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to tomers@tomers.co.il)
Post #: 4
RE: RDP packets dropped with 0x80070008 error (NOT ENOU... - 19.Dec.2008 10:08:42 AM   
tomers@tomers.co.il

 

Posts: 41
Joined: 1.Nov.2006
Status: offline
No, it's an IPVPN network, Cisco based. All the routers are configured to relay the dhcp request to the ISA and the ISA forward the request to the DHCP.
It works perfectly with all the braches except the one I get those errors in the ISA log. When I look at the log records for the other branches I can see very clear the packet going through the ISA to the DHCP and back.
When I look at that specific branch I also see the packets coming through the ISA to the DHCP but when the DHCP sends the packets back I get those errors in the ISA log.

(in reply to tshinder)
Post #: 5
RE: RDP packets dropped with 0x80070008 error (NOT ENOU... - 20.Dec.2008 9:51:08 AM   
pyfagorus

 

Posts: 1
Joined: 20.Dec.2008
Status: offline
I have the same error with L2TP VPN. VPN connections are diconnected periodically with error:
Denied Connection;
result_code = 0x80070008 ERROR_NOT_ENOUGH_MEMORY;
protocol = IP IPsec NAT-T Client;
direction = vpn_clinet -> server.

Software configuration:
Windows 2003 server SP2
ISA2006 Standart SP1

(First access rule)
I have standart VPN L2TP system access policy where IPsec NAT-T Client rule is:
port = UDP:4500;
direction = Send Recieve, from external to localhost.

(Second access rule)
And i have another access rule in Firewall Policy Rules:
port = UDP:1-65535;
direction = Send, from localhost to external.

This is last rule and maybe strange behavior ISA2006 are reason of my troubles.

Strange behavior becouse, first VPN L2TP rule should be processed before all firewall policy rules
as for sending IPsec NAT-T, as for recieving IPsec NAT-T.

However, the diagnostic log showed me that sending IPsec NAT-T packet processed by the first rule,
but recieving IPsec NAT-T processed by the second rule.

I think that ISA2006 dont destroy not finished send-recieve udp pair, and new udp packet from external
create a new record in memory for new pair. As result we have not enough memory.

I disable my second rule, and now LT2P VPN work fine.

(in reply to tomers@tomers.co.il)
Post #: 6
RE: RDP packets dropped with 0x80070008 error (NOT ENOU... - 24.Dec.2008 9:58:56 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Indeed! That second rule looked like something that wasn't required.

Good to hear you got it working and thanks for the info!

Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to pyfagorus)
Post #: 7

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 Firewall] >> General >> RDP packets dropped with 0x80070008 error (NOT ENOUGH MEMORY) Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts