FIX: ISA Firewall Causes Handle Leak in LSASS (331068)



The information in this article applies to:

  • Microsoft Internet Security and Acceleration Server 2000
  • Microsoft Internet Security and Acceleration Server 2000 SP1

This article was previously published under Q331068

SYMPTOMS

Internet Security and Acceleration (ISA) Server Firewall service may slow down or stop responding to client requests.

This behavior occurs under the following configuration:
  • The internal clients are running the ISA Server Firewall client.

    -and-
  • The ISA Server has access policies defined that require user authentication. This might be Protocol rules or Site and Content rules that apply to specific users or groups.

CAUSE

The ISA Server Firewall service causes a handle leak in the Local Security Authority (LSASS) process.

You can detect the leak by using the System Monitor (Perfmon) tool to analyze the Handle Counter for LSASS Process.

RESOLUTION

To resolve this problem, obtain the Update Rollup for ISA Server Services. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

810493 INFO: Update Rollup for ISA Server Services

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.

Modification Type:MinorLast Reviewed:9/27/2005
Keywords:kbHotfixServer kbQFE kbQFE kbbug kbfix KB331068 kbAudDeveloper