Welcome to ISAserver.org

isa2006 proxy resource errors

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Web Proxy] >> Unihomed >> isa2006 proxy resource errors

Page: [1]

Message

<< Older Topic Newer Topic >>

isa2006 proxy resource errors - 15.May2008 7:18:39 PM

chad

Posts: 1
Joined: 15.May2008
Status: offline

We have Isaserver 2006 deployed to serve as a web proxy, unihomed, on windows 2003 sp2.
For two months of testing, it worked great, and then we moved our user base of 600 to use it as their web proxy.

Since then, (this load is more than we were able to generate in testing) we have had weekly issues.

It is hard to determine which error is the symptom of the root cause.

Each week, I have had to hard reboot the system, even though I scheduled a 3 am auto-reboot to work around until I solve.

the console has this error, and doesn't allow me to log in:

"A problem is preventing Windows from accurately checking the license for this computer. Error Code: 0x80070002"

Prior to power cycling, I see windows saying "the system cannot log you on due to the following error: Insufficient system resources

exist to complete the requested service."

and then after rebooting, the event log has many messages, the most indicative is this:

"The Web proxy filter failed to create a network socket because there are no avilabel ports on this computer....." event id 14198.

I have troubleshot each of these errors individually. A month ago I disabled firewall logging because of the port issue, I ran perfmon

looking for memory leaks and found that indeed isa2006 had a slow memory leak. One that I thought I rectified by hotfix released.

(forgive me I lost the kb article)... it referred to firewall logging causing a memory leak. So I patched the registry as well as

disabled the firewall logging, which we don't really need since we're doing web proxy.

Still it appears a memory leak is happening.

My fellow admins want me to reload the OS.

I know this product works, we've used it before in the same scenario.

My suspicion is that something is causing one resource to go unavailable and causing a myriad of following errors that cloud the issue.

The error above 0x80070002 I think is a red herring, that ocurrs because ISAserver takes up all the ports, even though I have increased

them to 65535.

At this point, I've too many paths to go down, and I've gone down each one of them shortly.

Has anyone seen this level of confusion before with this implementation and are you able to lend guidance?

Thank you
-Chad
p.s. I am typically notified because the web proxy which requires authentication repeatedly askes for authentication.
The server remains pingable, so my noc doesn't report errors, services all remain up.
however I can not remote desktop in and the console while responsive, does not allow me to log in... simply reports the errors I've indicated.