• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Event ID:14147

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 General] >> General >> Event ID:14147 Page: [1]
Login
Message << Older Topic   Newer Topic >>
Event ID:14147 - 21.Sep.2007 5:59:42 PM   
ozzy

 

Posts: 14
Joined: 18.Apr.2003
From: Kansas City
Status: offline
In our lab, we are having event id:14147 (http://support.microsoft.com/kb/884496) issue. Isa server 2006 has 4 NICs as follows:

OB2-INSIDE: 10.0.8.1/255.255.255.0
OB1-OUTSIDE: 192.168.1.253/255.255.255.0
PCI-X1-DEVELOPMENT: 10.0.16.1/255.255.255.0
PCI-X2-SERVICES: 10.0.8.1/255.255.255.0

After new installation, first we completed the networks configuration. Our network template is Back Firewall since we have PIX along the path of ISA server.
Routing schema:
From All Networks to External : NAT
Inbetween internal networks : ROUTE
After create the networks and configure the routing we always get this error in the event viewer. We tried different configuration but no luck. Despite this event log entry though everything seems to be working OK. error entry shows up in each reboot. This may causing confusion in the futurue and will triger lots of false positive alerts. Is anybody know or have any idea what is causing this?

Notes:
192 address is only assigned to external NIC nowherelse
There is no site to site VPN settings. This is internal use only.











 
Post #: 1
RE: Event ID:14147 - 22.Sep.2007 9:08:58 PM   
Yorgy

 

Posts: 158
Joined: 20.Sep.2006
Status: offline
Hi there--

Take a look at this article published by Dr. Shinder, it may what you are looking for.

http://www.isaserver.org/pages/article.asp?id=1278


HIH
Yorgy

_____________________________

Life is a zoo in a jungle!

(in reply to ozzy)
Post #: 2
RE: Event ID:14147 - 24.Sep.2007 12:42:26 PM   
ozzy

 

Posts: 14
Joined: 18.Apr.2003
From: Kansas City
Status: offline
Great Article Yorgy,
Thanks,

Unfortunatly this could not help, since we can not bind any IP range or NIC to ISA's default "External" network. Since this is a backend server, we need to assign 192 private IP to the external NIC. This is what we get:


ISA Server detected routes through the network adapter OB1-OUTSIDE that do not correlate with the network to which this network adapter belongs. When networks are configured correctly, the IP address ranges included in each array-level network must include all IP addresses that are routable through its network adapters according to their routing tables. Otherwise valid packets may be dropped as spoofed. The following ranges are included in the network's IP address ranges but are not routable through any of the network's adapters: 10.255.255.255-10.255.255.255;. Note that this event may be generated once after you add a route, create a remote site network, or configure Network Load Balancing and may be safely ignored if it does not re-occur.



(in reply to Yorgy)
Post #: 3
RE: Event ID:14147 - 25.Sep.2007 9:32:06 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Try this one:

http://www.isaserver.org/tutorials/Advanced-ISA-Firewall-Configuration-Network-Behind-Network-Scenarios.html

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to ozzy)
Post #: 4
RE: Event ID:14147 - 26.Sep.2007 4:16:48 PM   
ozzy

 

Posts: 14
Joined: 18.Apr.2003
From: Kansas City
Status: offline
Thanks Tom,
This explains, we use the 10.255.255.255 subnet entry to one of the internal "network" of the ISA 2006, now it is OK.


(in reply to tshinder)
Post #: 5

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 General] >> General >> Event ID:14147 Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts