Firewall Service crashing during peak usage

Hello all. Hopefully this is not something unique to our environment.
We encountered the same problem previously with ISA 2004 SP1 and
replaced the system with better hardware and we still have the same
issue.

If this is something you can assist with, I would appreciate your help.

Thanks!
Jason G.

The following events keep appearing during the crash of our FW service:
Event Type: Error
Event Source: Microsoft ISA Server 2004
Event Category: None
Event ID: 1000
Date: 1/10/2006
Time: 2:13:54 PM
User: N/A
Computer: ********
Description:
Faulting application wspsrv.exe, version 4.0.2163.213, stamp 420bdbd0,
faulting module ntdll.dll, version 5.2.3790.1830, stamp 424377d2,
debug? 0, fault address 0x000224b2.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 00 70 00 70 00 6c 00 A.p.p.l.
0008: 69 00 63 00 61 00 74 00 i.c.a.t.
0010: 69 00 6f 00 6e 00 20 00 i.o.n. .
0018: 46 00 61 00 69 00 6c 00 F.a.i.l.
0020: 75 00 72 00 65 00 20 00 u.r.e. .
0028: 20 00 77 00 73 00 70 00 .w.s.p.
0030: 73 00 72 00 76 00 2e 00 s.r.v...
0038: 65 00 78 00 65 00 20 00 e.x.e. .
0040: 34 00 2e 00 30 00 2e 00 4...0...
0048: 32 00 31 00 36 00 33 00 2.1.6.3.
0050: 2e 00 32 00 31 00 33 00 ..2.1.3.
0058: 20 00 34 00 32 00 30 00 .4.2.0.
0060: 62 00 64 00 62 00 64 00 b.d.b.d.
0068: 30 00 20 00 69 00 6e 00 0. .i.n.
0070: 20 00 6e 00 74 00 64 00 .n.t.d.
0078: 6c 00 6c 00 2e 00 64 00 l.l...d.
0080: 6c 00 6c 00 20 00 35 00 l.l. .5.
0088: 2e 00 32 00 2e 00 33 00 ..2...3.
0090: 37 00 39 00 30 00 2e 00 7.9.0...
0098: 31 00 38 00 33 00 30 00 1.8.3.0.
00a0: 20 00 34 00 32 00 34 00 .4.2.4.
00a8: 33 00 37 00 37 00 64 00 3.7.7.d.
00b0: 32 00 20 00 66 00 44 00 2. .f.D.
00b8: 65 00 62 00 75 00 67 00 e.b.u.g.
00c0: 20 00 30 00 20 00 61 00 .0. .a.
00c8: 74 00 20 00 6f 00 66 00 t. .o.f.
00d0: 66 00 73 00 65 00 74 00 f.s.e.t.
00d8: 20 00 30 00 30 00 30 00 .0.0.0.
00e0: 32 00 32 00 34 00 62 00 2.2.4.b.
00e8: 32 00 0d 00 0a 00 2.....


===============


Event Type: Error
Event Source: Microsoft Firewall
Event Category: None
Event ID: 14057
Date: 1/10/2006
Time: 2:13:54 PM
User: N/A
Computer: *****
Description:
The Firewall service stopped because an application filter module
C:\WINDOWS\system32\ntdll.dll generated an exception code C0000005 in
address 7C8224B2 when function CompleteAsyncIO was called. To resolve
this error, remove recently installed application filters and restart
the service.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

.

Relevant Pages

  • ISA 2004 on Server 2003 Service stops responding.
    ... Faulting application wspsrv.exe, version 4.0.2163.213, stamp 420bdbd0, ... faulting module msvcrt.dll, version 7.0.3790.1830, stamp 4243785e, ... The Firewall service stopped because an application filter module ... If I have no response ASAP I will be reinstalling this server on ...
    (microsoft.public.isaserver)
  • Re: Outlook 2003 Crashing
    ... > Bucket 54912780, bucket table 1, faulting application outlook.exe, ... > version 11.0.5510.0, stamp 3f1380f0, faulting module ntdll.dll, version ... see Help and Support Center at ... > faulting module ntdll.dll, version 5.1.2600.1217, stamp 3eb1b41a, debug? ...
    (microsoft.public.outlook.general)
  • Re: Outlook 2003 Crashing
    ... > Bucket 54912780, bucket table 1, faulting application outlook.exe, ... > version 11.0.5510.0, stamp 3f1380f0, faulting module ntdll.dll, version ... see Help and Support Center at ... > faulting module ntdll.dll, version 5.1.2600.1217, stamp 3eb1b41a, debug? ...
    (microsoft.public.outlook)
  • Re: Word Crash without warning causing information lost.
    ... >A user in my complaint to me about Word Crashing causing her information ... > faulting module winword.exe, version 11.0.5604.0, stamp 3f314a2f, debug? ... see Help and Support Center at ...
    (microsoft.public.word.application.errors)
  • Re: Firewall Service crashing during peak usage
    ... Your error log states that error occured in some application filter module. ... > Faulting application wspsrv.exe, version 4.0.2163.213, stamp 420bdbd0, ... > faulting module ntdll.dll, version 5.2.3790.1830, stamp 424377d2, ... see Help and Support Center at ...
    (microsoft.public.isa.enterprise)