Re: ISA Server Problems



Good questions, Larry.

Some other questions to isolate the root cause:

1. When did the problem start to happen? What has been done?
2. If you plug client workstations directly to the switch, will the problem
persists?

Did you install Windows Server 2003 SP2? If yes, please check:

You may experience network-related problems after you install Windows
Server 2003 SP2 or the Scalable Networking Pack
http://support.microsoft.com/kb/936594

Other KB articles for SP2:

"Help and Support" feature is missing after you install Microsoft Windows
Server 2003 SP2 on a computer that is running Windows Small Business Server
2003
http://support.microsoft.com/kb/937231

Best practices and known issues when you install Windows Server 2003
Service Pack 2 on a Windows Small Business Server 2003-based computer
http://support.microsoft.com/kb/939421

In addition, please gather ISA Info and ISA Logs for me to check whether
it's an ISA related problem.

[Note] Please send all info to v-bpeng@xxxxxxxxxxxxx with subject: ISA
Server Problems (40353139).

1. ISA info:

a. Download the file from the following URL:
http://www.isatools.org/tools/isainfo.zip
b. Extract all files to a folder on ISA server
c. Double click Isainfo.js. This will generate 2 files
ISAInfo2004-<computer-name>.log and ISAInfo2004-<computer-name>.xml in the
current folder.
d. Please send these files to me.

2. ISA logs:

Enable the full Web Proxy/firewall logging option:
a. Open ISA 2004 management console.
b. Expand the server node and highlight 'Monitoring'.
c. In the right pane, switch to the 'Logging' tab, make sure the 'Task
Pane' is showed there.
d. In the 'Task Pane', click 'Configure Web Proxy Logging' under 'Logging
Tasks', and then switch the 'log storage format' from 'MSDE database'
(default) to 'File'.
e. Switch to the 'Fields' tab, and then click 'Select All'.
f. Click OK, and then click 'Apply' to save changes and update the
configuration.
g. Click 'Configure Firewall Logging'. Do step d~f to enable the full
logging options for firewall logging.

Prepare to take the trace:
a. Temporarily stop the Firewall service to clear the current existing W3C
logs: Monitoring->Services tab, and then right click 'Microsoft Firewall'
to choose 'Stop'.
b. Go to the log saving directory and clean any existing .W3C logs. By
default, the logs will be saved to 'C:\Program Files\Microsoft ISA
Server\ISALogs'. (Some MDF may not be able to deleted, that's normal.)
c. Go back to the ISA 2004 management console, and then Start the stopped
'Microsoft Firewall' service.

Reproduce the problem:
a. Reproduce the issue for at least 3 times.
b. Go back to the ISA server. Stop the 'Microsoft Firewall' service. Open
Windows Explorer, navigate to the ISA log file folder. Collect the recent
w3c files. Save them to a zip package as 'isalogs.zip'. Start the
'Microsoft Firewall' Service.
c. Send the zip packages to me.

Thanks for your time and I look forward to your update.

Sincerely,

Bill Peng
MCSE 2000, MCDBA, CCNP, CCDA
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
=====================================================
The public newsgroup only focuses on SBS related technical issues, for
other Microsoft products, we recommend you to post to appropriate newsgroup
to get most qualified responses.
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive notification. When responding to
posts via your newsreader, please "Reply to Group" so that others may learn
and benefit from your issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft PSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
From: "Larry Struckmeyer" <lstruckmeyer(at)mis-wizards(dot)com>
References: <B674F849-BB46-4876-948E-40A8E7539AFE@xxxxxxxxxxxxx>
Subject: Re: ISA Server Problems
Date: Tue, 4 Sep 2007 11:27:49 -0400
Lines: 43
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138
X-RFC2646: Format=Flowed; Original
Message-ID: <emb2qgw7HHA.2208@xxxxxxxxxxxxxxxxxxxx>
Newsgroups: microsoft.public.windows.server.sbs
NNTP-Posting-Host: pool-71-101-181-27.tampfl.dsl-w.verizon.net
71.101.181.27
Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl
Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:60673
X-Tomcat-NG: microsoft.public.windows.server.sbs

Hi Poodle:

Can you please confirm:

Workstation ->WAP-> Switch > SBS with ISA Internal NIC -> SBS External
NIC -> Router -> Internet

Have you tried re running the CEICW?

Any errors in your event logs?

All PC's have DHCP assigned by SBS?

All DNS settings point to the Internal NIC of your SBS server?

All PC's had ISA firewall installed, and it resolves?

Now that you have uninstalled ISA, have you uninstalled the ISA firewall?

Have you rerun the CEICW since uninstalling ISA?

Larry


"Poodle" <Poodle@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:B674F849-BB46-4876-948E-40A8E7539AFE@xxxxxxxxxxxxxxxx
Hi
I am running SBS 2003 Premium and had initially installed ISA 2004 on the
same server. The server has 2 NICs, one NIC is connected to an ADSL
modem
and
the other other to a 8port switch. Clients conect to the server through
a
4
port wireless modem, which in also connected to the switch.

Now sudenly all clients can get internet access, but the server has
internet. I have unistalled ISA, but to no resolve. The clients can get
their
emails through exchange and all, but not internet. I ping the server
from
the clients, and the reply in 0% loss.

What could be the problem?




.



Relevant Pages