We're having a problem with our ISA servers (2) becoming unavailable, i.e., users get a page cannot be displayed or some such. It happens randomly between the 2 servers.
We have 2 new servers, both dual proc, ~3 GHz P4, each with 4 GB RAM. F-Secure Antivirus for Internet Gateways is installed locally on each machine. The AV software is configured as an upstream proxy, pointing to the loopback address, on the appropriate port that it listens on.
This all works OK, until the outage occurs. When it happens, we find the following error in the logs:
Event ID 14130 The Web Proxy service detected that the upstream proxy '127.0.0.1' is not available.
A few minutes later, it says that the upstream proxy is available again (Event ID 14131).
So I've been loggin tons of counters on both machines, hoping that when it happens, I can go back in and see what's causing it. But nothing is obvious.
My question is, does anyone have a suggestion of what counters to look at that are most likely capturing the culprit? I'm monitoring all of the ISA counters as well as those that F-Secure installs, plus the system-related stuff (procs, memory, etc.)
I'd especially be grateful to hear from anyone using the F-Secure product and has it working well.