Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Strange ISA Errors & Web Proxy Problems

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 Firewall] >> General >> Strange ISA Errors & Web Proxy Problems Page: [1]
Login
Message << Older Topic   Newer Topic >>
Strange ISA Errors & Web Proxy Problems - 3.Sep.2008 9:04:37 AM   
fnuky

 

Posts: 4
Joined: 3.Sep.2008
Status: offline
Hello,
 
I've setup 2 new ISA Server 2006 Enterprise Servers (running SP1) at the edge of our network that communicate with a seperate ISA Configuration Storage Server.
I am having extreme difficulty getting any content to flow through the Proxy. In order to get clients using Internet Access, I've created new HTTP protocols for Port 80 that don't use the cache, however on the actual ISA servers themselves I cannot seem to bypass the proxy no matter what I do.
 
When trying to access a website through the proxy we get the following message: Error Code: 12206: Proxy chain Loop
 
I've ran the BPA on both the ISA servers and I'm getting a few errors that I cannot seem to find any solution to:
 
1. The Routing (chaining) failure warning alert was signaled 16 times:
9/3/2008 12:06:47 AM - ISA Server detected a proxy server loop. There may be a problem in the configuration of the ISA Server Web chaining policy. Alternatively, in Enterprise Edition, when CARP is enabled and there are intermittent interruptions of intra-array connectivity, array member A may forward a request to array member B according to the CARP algorithm, and array member B may forward the request to array member A in an endless loop.
 
2. The Low Non-Paged Pool error alert was signaled 8 times:
The size of the free non-paged pool fell below the system-defined minimum. ISA Server will reject new connections unless they are initiated by the ISA Server computer. In addition, the timeout for idle TCP connections was reduced.
This alert may indicate an attack on the ISA Server computer. Use the log viewer to examine ISA Server traffic. This event may also be raised when the ISA Server computer does not have the resources needed to handle legitimate traffic. If this is the case, you may need to add more memory to the system.

 
Just for reference all three servers are brand new dual quad core Xeon's with 8GB memory running Windows Server 2003 Enterprise edition and I can verify they are under pretty much no load and minimal traffic. The environment in which they are being used is in front of a few Exchange 2007 servers in a data centre so there are no users presently accessing the network either from within or externally.
 
I have search endlessly for two days looking for answers and I am now lost, any help appreciated.
Post #: 1
RE: Strange ISA Errors & Web Proxy Problems - 3.Sep.2008 9:12:55 AM   
paulo.oliveira

 

Posts: 792
Joined: 3.Jan.2008
From: Amazonas, Brazil
Status: offline
Hi,

quote:

2. The Low Non-Paged Pool error alert was signaled 8 times:
The size of the free non-paged pool fell below the system-defined minimum. ISA Server will reject new connections unless they are initiated by the ISA Server computer. In addition, the timeout for idle TCP connections was reduced.
This alert may indicate an attack on the ISA Server computer. Use the log viewer to examine ISA Server traffic. This event may also be raised when the ISA Server computer does not have the resources needed to handle legitimate traffic. If this is the case, you may need to add more memory to the system.

did you enabled the /3GB switch on boot.ini file?
Check this: http://blogs.isaserver.org/shinder/2008/08/21/beware-the-3gb-on-your-isa-firewalls/

Regards,
Paulo Oliveira.

(in reply to fnuky)
Post #: 2
RE: Strange ISA Errors & Web Proxy Problems - 4.Sep.2008 3:26:21 AM   
fnuky

 

Posts: 4
Joined: 3.Sep.2008
Status: offline
Hey Paulo,

I hadn't set the /3GB switch, so I tired this and it actually cause my ISA firewalls to be completely non-functional. When I ran BPA again, it had one single error message:

The /3GB startup switch is set on the local computer. THis switch reduces the size of the non-paged pool (NPP) used by hte local computer and may cause ISA Server to run with low resources. To correct this issue, remove the /3GB switch from the startup line in the boot.ini file.

I've now removed the /3GB switch and rebooted, the firewalls have come back online, but I'm back to where I started.


(in reply to paulo.oliveira)
Post #: 3

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 Firewall] >> General >> Strange ISA Errors & Web Proxy Problems Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts