Our ISA 2006 server has started to crash about once a week recently, I'm not sure why, I don't remember the start of these crashes coinciding with any software install. And it seems to be getting more frequent, at first it was a one off, then once every couple of weeks, once a week, and its crashed twice today. When it happens the firewall servce hangs & stops, which stops all in/out traffic, and the event log gets a number of application errors:
Event Type: Error Event Source: Microsoft Firewall Event Category: None Event ID: 14057 Date: 11/04/2008 Time: 12:26:18 User: N/A Computer: ISA2006 Description: The Firewall service stopped because an application filter module C:\Program Files\Microsoft ISA Server\w3filter.dll generated an exception code C0000005 in address 64731FC3 when function CompleteAsyncIO was called. To resolve this error, remove recently installed application filters and restart the service.
Event Type: Error Event Source: Microsoft ISA Server 2006 Event Category: None Event ID: 1000 Date: 11/04/2008 Time: 12:26:26 User: N/A Computer: ISA2006 Description: Faulting application wspsrv.exe, version 5.0.5721.240, stamp 46da7812, faulting module w3filter.dll, version 5.0.5721.240, stamp 46da77ff, debug? 0, fault address 0x00041fc3.
Looking at the last 4 events, the filter module is always w3filter.dll, the exception code is always C0000005 and always in address 64731FC3 using function CompleteAsyncIO.
Looking on eventid.net there is an error like this, but for ISA 2004 SP2 running surfcontrol, but we're running ISA 2006, and we're running BitDefender for ISA, could this be causing the crash? Has anyone seen this before, or know how to fix it?