Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

my internet access through isa 2004 go down frequently

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 Firewall] >> General >> my internet access through isa 2004 go down frequently Page: [1] 2   next >   >>
Login
Message << Older Topic   Newer Topic >>
my internet access through isa 2004 go down frequently - 8.Sep.2006 4:07:37 PM   
jossebrice

 

Posts: 14
Joined: 1.Jun.2005
From: LBV
Status: offline 		Hi list, My office is connected to internet through ISA 2004 sp2 on Win2k3 full patched server. Since the begin of this week, my internet access fall down with delay time connection in IE(my browser). In ISA console or in Windows event viewer, no error messages logged to help me know what's happen. Even if i restart Microsoft firewall, nothing happen. The only for me to solve the problème is to restart the server.
It worries me a lot. If  i'm absent for example for 2 hours and and the access go down, and unavalable during that périod.  I need a big help, reboot is not a solution. 
Josse
Post #: 1
RE: my internet access through isa 2004 go down frequently - 8.Sep.2006 4:11:41 PM   
elmajdal

 

Posts: 5061
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline 		is there any 3rd party software installed on the same box with ISA ???

any installed filter ??

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to jossebrice)
Post #: 2
RE: my internet access through isa 2004 go down frequently - 8.Sep.2006 5:32:57 PM   
jossebrice

 

Posts: 14
Joined: 1.Jun.2005
From: LBV
Status: offline
quote:

ORIGINAL: elmajdal

is there any 3rd party software installed on the same box with ISA ???

any installed filter ??

Yes GFI Web monitor is also install on the same box.

(in reply to elmajdal)
Post #: 3
RE: my internet access through isa 2004 go down frequently - 8.Sep.2006 9:01:28 PM   
elmajdal

 

Posts: 5061
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline 		Exactly !

i had the same problem with one of my clients few months ago and i uninstalled GFI WM and the problem vanished.

then i troed and installed a NEWER build of GFI WM and the problem didnt appear any more.

HTH

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to jossebrice)
Post #: 4
RE: my internet access through isa 2004 go down frequently - 11.Sep.2006 10:01:43 AM   
jossebrice

 

Posts: 14
Joined: 1.Jun.2005
From: LBV
Status: offline 		Ok i uninstall it and i'm waitting to see what will happen today and tomorrow.

I'll let you know. But how to explain that 3rd party software alterates the firewall.

(in reply to elmajdal)
Post #: 5
RE: my internet access through isa 2004 go down frequently - 11.Sep.2006 1:53:13 PM   
jossebrice

 

Posts: 14
Joined: 1.Jun.2005
From: LBV
Status: offline 		As told you before elmajdal, I uninstall GFI, but the probleme is still the same.
What else can i do ?

JosseBrice

(in reply to jossebrice)
Post #: 6
RE: my internet access through isa 2004 go down frequently - 11.Sep.2006 9:11:49 PM   
elmajdal

 

Posts: 5061
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline 		is your ISA  configured to log to a Microsoft SQL Server Desktop Engine (MSDE) database ?

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to jossebrice)
Post #: 7
RE: my internet access through isa 2004 go down frequently - 12.Sep.2006 2:17:11 PM   
jossebrice

 

Posts: 14
Joined: 1.Jun.2005
From: LBV
Status: offline
quote:

ORIGINAL: elmajdal

is your ISA  configured to log to a Microsoft SQL Server Desktop Engine (MSDE) database ?


Yes it is.
I suppose that i should log on txt file ? I'll do it and let you know the result.

(in reply to elmajdal)
Post #: 8
RE: my internet access through isa 2004 go down frequently - 12.Sep.2006 3:06:53 PM   
elmajdal

 

Posts: 5061
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline 		no u can keep it as it is ,  but check this : http://support.microsoft.com/default.aspx?scid=kb;en-us;909636&sd=rss&spid=2108

HTH

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to jossebrice)
Post #: 9
RE: my internet access through isa 2004 go down frequently - 12.Sep.2006 3:09:01 PM   
Boedus

 

Posts: 146
Joined: 8.Sep.2006
Status: offline 		A login issue will cause the ISA to stop the services.
It means if the ISA server can not log anymore for any reason (Free disk space, SQL server issue, MSDE or txt file) it will go down.
But still you should have an error in the eventlog.

To make sure check free disk space.
File fragmentation will also cause really serious issues. If your logs files are really big (Or your SQL database), ISA will timeout to try to write in to those files, consequently internet access will be extremelly slow as the ISA server might respond 1 mn later to each internet hit.
But in that case you will see hundreds of timeout errors in the event log, which is not your case apparently.

< Message edited by Boedus -- 12.Sep.2006 3:10:31 PM >

(in reply to jossebrice)
Post #: 10
RE: my internet access through isa 2004 go down frequently - 12.Sep.2006 4:28:04 PM   
jossebrice

 

Posts: 14
Joined: 1.Jun.2005
From: LBV
Status: offline
quote:

ORIGINAL: Boedus

A login issue will cause the ISA to stop the services.
It means if the ISA server can not log anymore for any reason (Free disk space, SQL server issue, MSDE or txt file) it will go down.
But still you should have an error in the eventlog.

To make sure check free disk space.
File fragmentation will also cause really serious issues. If your logs files are really big (Or your SQL database), ISA will timeout to try to write in to those files, consequently internet access will be extremelly slow as the ISA server might respond 1 mn later to each internet hit.
But in that case you will see hundreds of timeout errors in the event log, which is not your case apparently.


Boedus,
I haven't  any free disk space problem. The strangest in my case is that no ISA services is stopped and no errors in eventlog.
Only internet access is down with delay time out. My VPN server on the same box works fine.

elmajdal,
I'll let at firt every log in text file and see what will happen.
Normaly write in txt file uses less ressources than MSDE insertion processes, no ??

(in reply to Boedus)
Post #: 11
RE: my internet access through isa 2004 go down frequently - 13.Sep.2006 11:22:46 AM   
jossebrice

 

Posts: 14
Joined: 1.Jun.2005
From: LBV
Status: offline 		Hi all,

The problem persists and i really don't know what to do.

It's so strange, i try on another server and the result is the same. Maybe the Microsoft Firewall has security problem ??

(in reply to jossebrice)
Post #: 12
RE: my internet access through isa 2004 go down frequently - 14.Sep.2006 5:34:55 PM   
clemente1981

 

Posts: 1
Joined: 14.Sep.2006
Status: offline 		Hello, i have the same problem, my internet conection is going down, no one can explore the web, but the server accept terminal server conection and resolve ping to external ip's, nothing happens qhen i restart the firewall services and two hours after the problem starts it is solved all alone 


i have two kind of clients, firwall clients without getaway adress, and proxy clients, the server can't access internet too, and my operating system is windows 2003 sbs premium r2.


thanks!

(in reply to jossebrice)
Post #: 13
RE: my internet access through isa 2004 go down frequently - 14.Sep.2006 7:19:40 PM   
elmajdal

 

Posts: 5061
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
quote:

It's so strange, i try on another server and the result is the same. Maybe the Microsoft Firewall has security problem ??


u said u tried it on another server !!

another clean installation and still the same problem there???

are you sure its an ISA problem ? not the router or the modem the ISA connected to ??

how about the NICs on the ISA, how did u set them up ?



_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to jossebrice)
Post #: 14
RE: my internet access through isa 2004 go down frequently - 18.Sep.2006 11:27:43 AM   
jossebrice

 

Posts: 14
Joined: 1.Jun.2005
From: LBV
Status: offline
quote:

ORIGINAL: elmajdal

quote:

It's so strange, i try on another server and the result is the same. Maybe the Microsoft Firewall has security problem ??


u said u tried it on another server !!

another clean installation and still the same problem there???

are you sure its an ISA problem ? not the router or the modem the ISA connected to ??

how about the NICs on the ISA, how did u set them up ?




Yes i install a new clean, full patched ISA server 2004 server in the order to solve the problème. But very strange after a moment the connection go down.

When you ask me if it's an ISA problem, i'll first say yes, because when i reboot the server everything is ok.

But i have no idea on  what can make my internet access go down. Maybe you can give me a way to investigate on it??

(in reply to elmajdal)
Post #: 15
RE: my internet access through isa 2004 go down frequently - 21.Sep.2006 3:49:10 PM   
clayman24

 

Posts: 3
Joined: 21.Sep.2006
Status: offline 		Here is my 2 cents for what its worth,

I have been using isa server 2004 for over 2 years and have had this problem just like you did. I stumbled on the solution because it was an intermittant problem (once or twice a week) for a while then all of a sudden I would have to restart the server multiple times a day because internet was going down.  I did the same as you, rebuilt server, changed server hardware, no luck.

It turned out to be an old PC on a remote network causing the problem (either the PC or the NIC in the PC), The problem solved itself exactly at the same time that this PC located at a remote site stopped connecting to us via VPN.  The PC was quite old ( W2000, PIII 350Mhz, 256M Ram, 3Com NIC, At least 5 years old).

I isolated it to this pc as I had it shipped to head office and examined it off network for spyware, viruses etc and found none.  I plugged it into the network locally and as soon as I did the firewall started going down again without warning.  I pulled the plug on the unit and rebooted the firewall and wammo no problems again.  Now my isa never has a problem.  I now go at least 4 weeks at a time without restarting the unit.  I have a PIV 3.0ghz, 1Gig ram, 3 NIC's ( Int, ext, DMZ), win2003 RTM, ISA sp2.

I am not sure if this helps you but I wanted to pass on my experience to see if this may apply to you.

Clay

(in reply to jossebrice)
Post #: 16
RE: my internet access through isa 2004 go down frequently - 22.Sep.2006 12:26:09 PM   
jossebrice

 

Posts: 14
Joined: 1.Jun.2005
From: LBV
Status: offline
quote:

ORIGINAL: clayman24

Here is my 2 cents for what its worth,

I have been using isa server 2004 for over 2 years and have had this problem just like you did. I stumbled on the solution because it was an intermittant problem (once or twice a week) for a while then all of a sudden I would have to restart the server multiple times a day because internet was going down.  I did the same as you, rebuilt server, changed server hardware, no luck.

It turned out to be an old PC on a remote network causing the problem (either the PC or the NIC in the PC), The problem solved itself exactly at the same time that this PC located at a remote site stopped connecting to us via VPN.  The PC was quite old ( W2000, PIII 350Mhz, 256M Ram, 3Com NIC, At least 5 years old).

I isolated it to this pc as I had it shipped to head office and examined it off network for spyware, viruses etc and found none.  I plugged it into the network locally and as soon as I did the firewall started going down again without warning.  I pulled the plug on the unit and rebooted the firewall and wammo no problems again.  Now my isa never has a problem.  I now go at least 4 weeks at a time without restarting the unit.  I have a PIV 3.0ghz, 1Gig ram, 3 NIC's ( Int, ext, DMZ), win2003 RTM, ISA sp2.

I am not sure if this helps you but I wanted to pass on my experience to see if this may apply to you.

Clay


Yes clayman24 i'm also finally thinking that the problem results from a machine on the network which causes Isa's dysfunction.
But the real problem now is to locate the remote pc. Any way to help me investigate on it ????

(in reply to clayman24)
Post #: 17
RE: my internet access through isa 2004 go down frequently - 29.Sep.2006 3:40:58 PM   
clayman24

 

Posts: 3
Joined: 21.Sep.2006
Status: offline 		In discussion with my It person, We have come to the realization that the problem was the result of an old 3com network card installed on the pc that was causing the problems.  Apparently those cards constantly send out broadcast traffic that can cause the problems.

Look at you network cards and see how much traffic is coming from them, I bet you will find one that is the culprit.

Clayton

(in reply to jossebrice)
Post #: 18
RE: my internet access through isa 2004 go down frequently - 3.Oct.2006 1:19:51 PM   
jossebrice

 

Posts: 14
Joined: 1.Jun.2005
From: LBV
Status: offline
quote:

ORIGINAL: clayman24

In discussion with my It person, We have come to the realization that the problem was the result of an old 3com network card installed on the pc that was causing the problems.  Apparently those cards constantly send out broadcast traffic that can cause the problems.

Look at you network cards and see how much traffic is coming from them, I bet you will find one that is the culprit.

Clayton


I'll try to find those NICs with snifferpro, and in first time try to change all old 3com nics and see what is happen.

(in reply to clayman24)
Post #: 19
RE: my internet access through isa 2004 go down frequently - 30.Jul.2007 3:28:25 PM   
kentf

 

Posts: 14
Joined: 18.Jul.2007
Status: offline 		hm.. i have the similar problem. i have to reboot the server weekly!

so is it the really the old 3com NICs causing this problem??

can anyone confirm?? thx.

(in reply to jossebrice)
Post #: 20

Page:   [1] 2   next >   >> << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 Firewall] >> General >> my internet access through isa 2004 go down frequently Page: [1] 2   next >   >>
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts