Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Security Shield is crashing my Firewall Service

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 Firewall] >> General >> Security Shield is crashing my Firewall Service Page: [1]
Login
Message << Older Topic   Newer Topic >>
Security Shield is crashing my Firewall Service - 7.Dec.2007 12:09:21 PM   
gssomers

 

Posts: 2
Joined: 19.Nov.2007
Status: offline
The error message I'm getting in Event Viewer reads this way:

The Firewall service stopped because an application filter module C:\Program Files\Network Associates\McAfee SecurityShield\bin\Isa2K4Filter.dll generated an exception code C0000005 in address 6680AE91 when function CompleteAsyncIO was called. To resolve this error, remove recently installed application filters and restart the service.

Since I reinstalled Security Shield 1.0 Patch 5, that is when the problems began.

Once I disabled the Web Proxy in ISA my problems ceased.
Post #: 1
RE: Security Shield is crashing my Firewall Service - 9.Dec.2007 12:51:08 PM   
tshinder

 

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline
Looks like a Security Shield bug, ask them to fix it.

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to gssomers)
Post #: 2
RE: Security Shield is crashing my Firewall Service - 9.Dec.2007 6:54:09 PM   
ferrix

 

Posts: 375
Joined: 16.Mar.2005
Status: offline
Yeah and don't hold your breath.  I don't actually know anyone who uses SS without enormous problems.

(Full disclosure, our products interoperate with AV filters, although I don't benefit by ripping on SS).

(in reply to tshinder)
Post #: 3
RE: Security Shield is crashing my Firewall Service - 10.Dec.2007 11:46:10 AM   
tshinder

 

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Ferrix,

Thanks! I have to admit that I don't know anyone who uses SS either.

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to ferrix)
Post #: 4
RE: Security Shield is crashing my Firewall Service - 11.Dec.2007 9:40:47 AM   
gssomers

 

Posts: 2
Joined: 19.Nov.2007
Status: offline
From the looks of things we may have to find another solution for monitoring the traffic passing thru ISA.

Thanks for the input

(in reply to tshinder)
Post #: 5
RE: Security Shield is crashing my Firewall Service - 11.Dec.2007 10:18:54 AM   
tshinder

 

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline
The ISA Firewall itself can monitor all the traffic moving through it. No add ons required just for monitoring.

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to gssomers)
Post #: 6
RE: Security Shield is crashing my Firewall Service - 9.Jan.2008 8:11:10 AM   
vuilverwerking

 

Posts: 26
Joined: 29.Dec.2006
Status: offline
Hi,

I don't have any good words for the McAfee SecurityShield Team!

After 1 year off fighting with McAfee Tech? Support it works now fine on our ISA  2006 Server (Windows 2003 SP2.)

- SecurityShield 1.
- Give the "NETWORK SERVICE" full access to the C:\Program Files\Network Associates & C:\Program Files\Common Files\Network Associates Folders (RTFM Patch 5)
- Patch 5.
- Don't forget to install the latest Scan Engine 5200 Manualy!!!! (I think that is your problem maker). The install package doesn't contain 5200?
- And if you use MS WSUS  3.0 > SSH Hotfix 352063 for the WSUS 3.0 download problems (Ask McAfee, don't forget to scream!).

If you use McAfee VirusScan on your ISA Server... Exclude the following folders in On-Access Scan Properties:
C:\Program Files\Microsoft ISA Server\ (and subfolders)
C:\Program Files\Network Associates\McAfee SecurityShield (and subfolders)
C:\urlcache
and don't forget to look at the Access Protection Properties in McAfee VirusScan.

- Oh, i did have big problems with ePo Server 3.6.1 managing SSH 1.0
Don't use it with  ePo Server, remove the NAP files for SSH  (Use ePo only for reporting/monitoring).
ePo 4.0 doesn't even support it. (Only monitoring)

Most off this settings i have figured out by myself, because if you don't............. you have to wait for a couple off weeks for tech support.
All the tech support wants is a Remote Session? (Why do i use ISA.....;-)

Look also at the McAfee SpamKiller 2.1 Add-On for SecurityShield (This one works great).

Greetings & Succes










BTW:
For the WSUS hotfix:

After installing the HotFix we need to configure the registry to enable
Microsoft Windows Update

The user agents are :
*       Windows-update-agent
*       Microsoft BITS
*       Industry Update Control
*       Service Pack Setup

Configure the registry key to enable Microsoft Windows Server Updates
Service (WSUS) 3.0 Update , To do this, Follow these step:

*       Go to machine where "SecurityShield"  is installed.
*       Click on "Start"
*       Chose "Run"
*       Type "regedit" in the dialog box , Registry window will open.
*       Locate and then click the following registry sub key:
        HKEY_LOCAL_MACHINE \ SOFTWRAE \ NETWORK  ASSOCIATES \
McAfee SecurityShield for Microsoft ISA Server \ Policies.
*       In the right Pane ,right click "StreamingUser Agents" and then
click Modify.
*       Type the Following information
                 Windows-update-agent,Microsoft BITS, Industry Update Control, Service Pack setup
*       Restart the McAfee SecurityShield service.
*       Restart the Microsoft ISA firewall service.

This HotFix provides a workaround that allows all windows update traffic
(Microsoft Windows Server Updates Service (WSUS) 3.0 Packages)
UnScanned


Also look for:

Generating HTTP Logs for Security Shield;
https://knowledge.mcafee.com/SupportSite/search.do?cmd=displayKC&docType=kc&externalId=KB45797&sliceId=SAL_Public&dialogID=20188368&stateId=1 0 20186473

How to get Symantec Live updates to work via SecurityShield;
https://knowledge.mcafee.com/SupportSite/search.do?cmd=displayKC&docType=kc&externalId=KB44979&sliceId=SAL_Public&dialogID=20188427&stateId=1 0 20186495

Enabling SecurityShield eServicesScanner (HTTP Transport) logging;
https://knowledge.mcafee.com/SupportSite/search.do?cmd=displayKC&docType=kc&externalId=613120&sliceId=SAL_Public&dialogID=20190171&stateId=1 0 20186511

How to turn on SMTP Logging for SecurityShield;
https://knowledge.mcafee.com/SupportSite/search.do?cmd=displayKC&docType=kc&externalId=KB44977&sliceId=SAL_Public&dialogID=20190171&stateId=1 0 20186511

< Message edited by vuilverwerking -- 9.Jan.2008 9:54:56 AM >

(in reply to tshinder)
Post #: 7
RE: Security Shield is crashing my Firewall Service - 9.Jan.2008 2:13:58 PM   
tshinder

 

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline
Great info!

Thanks!
Tom


_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to vuilverwerking)
Post #: 8

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 Firewall] >> General >> Security Shield is crashing my Firewall Service Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts