Welcome to ISAserver.org

RE: Roll up discussion link for posts up to 01-7-2006

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Misc.] >> Tom's ISA Firewall Blog Discussion >> RE: Roll up discussion link for posts up to 01-7-2006

Page: << < prev 1 [2]

Message

<< Older Topic Newer Topic >>

RE: Roll up discussion link for posts up to 01-7-2006 - 8.Jan.2006 4:11:36 PM

denli

Posts: 27
Joined: 15.Jul.2005
Status: offline

I haven't a clue.
I am however running GFi WebMonitor 3.1.42 on that server.

It hasn't crashed any more, but the load is minimal for the moment.
I will check it up again when people starts showing up for work tomorrow.

_____________________________

/Dennis

(in reply to tshinder)

Post #: 21

Featured Links*

RE: Roll up discussion link for posts up to 01-7-2006 - 8.Jan.2006 6:20:36 PM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Dennis,

It might be GFI, but I wouldn't want to blame it without some testing.

Keep us up to date on how things work out when the load increases during the work week.

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to denli)

Post #: 22

RE: Roll up discussion link for posts up to 01-7-2006 - 8.Jan.2006 6:59:07 PM

denli

Posts: 27
Joined: 15.Jul.2005
Status: offline

I also remembered that I've got Collective Software LogHostname 1.0.3 (trialversion) set up on that machine too.

_____________________________

/Dennis

(in reply to tshinder)

Post #: 23

RE: Roll up discussion link for posts up to 01-7-2006 - 9.Jan.2006 12:07:25 PM

denli

Posts: 27
Joined: 15.Jul.2005
Status: offline

It was MSDE the acting up

quote:

Event Type: Error
Event Source: Microsoft Firewall
Event Category: None
Event ID: 14007
Date: 2006-01-09
Time: 10:23:57
User: N/A
Computer: XXXX
Description:
A shortage of available memory caused the Firewall service to fail. The ISA Server computer cannot support additional connections for the server. The Event Viewer Data window displays the number of active connections.

This KB helped me out.
http://support.microsoft.com/?id=909636

_____________________________

/Dennis

(in reply to denli)

Post #: 24

RE: Roll up discussion link for posts up to 01-7-2006 - 9.Jan.2006 1:39:15 PM

denli

Posts: 27
Joined: 15.Jul.2005
Status: offline

I still got problems but the ISA doesn't hang every 3 minutes any more.
Restarting the MSDE clears up the problems for a while.

I'm thinking of migrating to SQL instead (or perhaps SQL 2005 Express).

_____________________________

/Dennis

(in reply to denli)

Post #: 25

RE: Roll up discussion link for posts up to 01-7-2006 - 9.Jan.2006 6:03:41 PM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Dennis,

Maybe you could tune the amount of memory used by MSDE, although that shoudn't be required, it might help with the stability issue.

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to denli)

Post #: 26

RE: Roll up discussion link for posts up to 01-7-2006 - 9.Jan.2006 6:04:32 PM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

quote:

ORIGINAL: denli

It was MSDE the acting up

quote:

Event Type: Error
Event Source: Microsoft Firewall
Event Category: None
Event ID: 14007
Date: 2006-01-09
Time: 10:23:57
User: N/A
Computer: XXXX
Description:
A shortage of available memory caused the Firewall service to fail. The ISA Server computer cannot support additional connections for the server. The Event Viewer Data window displays the number of active connections.

This KB helped me out.
http://support.microsoft.com/?id=909636

Hi Dennis,

Oh! OK, I didn't realize that you already tuned MDSE memory usage.

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to denli)

Post #: 27

RE: Roll up discussion link for posts up to 01-7-2006 - 9.Jan.2006 9:40:31 PM

denli

Posts: 27
Joined: 15.Jul.2005
Status: offline

Hi Tom,

Now it has gone from bad to worse.
After uninstalling GFi WebMonitor and Longhostname none of my clients can use HTTPS any more.

I'm going to try setting up another member in the array and check if I can replicate the problem with a freshly installed ISA Server.

_____________________________

/Dennis

(in reply to tshinder)

Post #: 28

RE: Roll up discussion link for posts up to 01-7-2006 - 10.Jan.2006 1:49:48 PM

Snojlsky

Posts: 34
Joined: 16.Aug.2001
Status: offline

Curious..

Haven�t used signatures before, afraid it would have too much impact on performance.

Anyone that have noticed performance impact when running this?

It:s looks like a realy nice script/solution J

Best regards

(in reply to denli)

Post #: 29

RE: Roll up discussion link for posts up to 01-7-2006 - 11.Jan.2006 4:07:17 PM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Dennis,

YIKES!

That's very strange that only SSL connections are affected.

Let us know what happens with your replication attempt.

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to denli)

Post #: 30

RE: Roll up discussion link for posts up to 01-7-2006 - 11.Jan.2006 4:28:54 PM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

quote:

ORIGINAL: Snojlsky

Curious..

Haven't used signatures before, afraid it would have too much impact on performance.

Anyone that have noticed performance impact when running this?

It:s looks like a realy nice script/solution J

Best regards

Hi Snoj,
Depends on how much traffic you have and your current level of processor utilization. You can always backup your config, run the script, and see the effects and if it taxes your processor too much, you can restore the previous config.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to Snojlsky)

Post #: 31

RE: Roll up discussion link for posts up to 01-7-2006 - 15.Jan.2006 12:04:58 AM

denli

Posts: 27
Joined: 15.Jul.2005
Status: offline

quote:

ORIGINAL: tshinder
Let us know what happens with your replication attempt.

I restored an ISA-backup of the complete config and it went down hard.

I am not sure however if I just should have imported the settings instead since the new ISA had a different name.

I'm rebuilding a clean environment now instead so that I can replicate up till before installing GFi Webmonitor and LogHostname.
(I saw that GFi has released a new version a few days ago that implements wmf-filtering.)

< Message edited by denli -- 15.Jan.2006 12:10:02 AM >

_____________________________

/Dennis

(in reply to tshinder)

Post #: 32

RE: Roll up discussion link for posts up to 01-7-2006 - 16.Jan.2006 4:56:46 PM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Dennis,

Thanks for the update!

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to denli)

Post #: 33

RE: Roll up discussion link for posts up to 01-7-2006 - 13.Sep.2006 9:55:02 PM

denli

Posts: 27
Joined: 15.Jul.2005
Status: offline

Sorry I never got around to follow up on my problem but ISA 2004 did indeed had a bug when using HTTP-filtering.
MS has since released a hotfix that has been distributed with MSUP.

I haven't however tried to replicate the problem since I don't like having my CEO breathing down my neck when we can't access our customers networks.

_____________________________

/Dennis

(in reply to tshinder)

Post #: 34