Firewall service does not start when you are using the Internet Connection Wizard (313964)


The information in this article applies to:

  • Microsoft Internet Security and Acceleration Server 2000
This article was previously published under Q313964

SYMPTOMS

On a computer that is running Microsoft Windows Server 2003 or Microsoft Windows Server 2003 Enterprise, the ISA Server Firewall service may not start if you enable the Internet Connection Firewall, and the following error message may be logged in the System event:
Microsoft Firewall failed. The failure occurred during Initialization of Network Address Translation (NAT) because the system call InitNAT failed.
Use the source location 308.1113.3.0.1200.123 to report the failure. The error code in the Data area of the event properties indicates the cause of the failure. For more information about this event, see ISA Server Help. The error description is: Access is denied.

RESOLUTION

To resolve this problem, obtain latest service pack for ISA Server 2000. For more information about the latest service pack, click the following article number to view the article in the Microsoft Knowledge Base:

313139 How to obtain the latest Internet Security and Acceleration Server 2000 service pack

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

This problem was corrected in ISA Server 2000 SP1.

MORE INFORMATION

After you apply the ISA Server service pack, an example of the logged event appears as:
Microsoft Firewall failed. The failure occurred during Initialization of Network Address Translation (NAT) because the system call PNATInit failed. Use the source location 308.1151.3.0.1200.153 to report the failure. The error code in the Data area of the event properties indicates the cause of the failure. This failure may be due to the Internet Connection Firewall (ICF) service being enabled. If it is enabled, please disable the service named "Internet Connection Firewall (ICF) / Internet Connection Sharing (ICS)" (SharedAccess). Then, restart the computer. For more information about this event, see ISA Server Help. The error description is: Access is denied.
Note that ICF and the ISA Server Firewall are still mutually exclusive services. That is, you can start only one of the services a one time. If you want to protect large networks and you have purchased ISA Server, you should be using the ISA Firewall service, because it provides greater functionality and reporting capabilities.
Modification Type:MinorLast Reviewed:10/24/2005
Keywords:kbbug kbenv kbnofix KB313964
©2004 Microsoft Corporation. All rights reserved.