ISA Server Intermittently Stops Responding to Web Proxy Client Requests (828044)


The information in this article applies to:

  • Microsoft Internet Security and Acceleration Server 2000

SYMPTOMS

Your Microsoft Internet Security and Acceleration (ISA) Server 2000 server may intermittently stop responding to Web Proxy client requests. When you troubleshoot this problem, you notice all the following symptoms:
  • The Lsass.exe process uses a very high percentage of memory and continues to increase memory usage.
  • If you stop the Microsoft Web Proxy service (W3Proxy.exe), the Lsass.exe process does not use additional memory, but it does not release the memory that it currently has allocated.
  • If you restart the server, the problem is resolved.

CAUSE

This problem may occur if you configure the Microsoft Web Proxy service to authenticate outgoing Web Proxy client requests. The Microsoft Web Proxy service does not correctly release security context handles when it authenticates these client requests. This causes the Lsass.exe process to use additional memory resources. After the Lsass.exe process has used a lot of memory, the Microsoft Web Proxy service can no longer authenticate these outgoing requests and, as a result, stops responding to client requests.

RESOLUTION

A supported hotfix is now available from Microsoft, but it is only intended to correct the problem that is described in this article. Only apply it to systems that are experiencing this specific problem. This hotfix may receive additional testing. Therefore, if you are not severely affected by this problem, Microsoft recommends that you wait for the next Internet Security and Acceleration Server 2000 service pack that contains this hotfix.

To resolve this problem immediately, contact Microsoft Product Support Services to obtain the hotfix. For a complete list of Microsoft Product Support Services phone numbers and information about support costs, visit the following Microsoft Web site:

http://support.microsoft.com/contactus/?ws=support

Note In special cases, charges that are ordinarily incurred for support calls may be canceled if a Microsoft Support Professional determines that a specific update will resolve your problem. The usual support costs will apply to additional support questions and issues that do not qualify for the specific update in question. The English version of this hotfix has the file attributes (or later) that are listed in the following table. The dates and times for these files are listed in coordinated universal time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel. 

Date         Time   Version       Size     File name
-------------------------------------------------------
11-Sep-2003  23:37  3.0.1200.292  178,448  Mspadmin.exe
11-Sep-2003  23:37  3.0.1200.292  103,184  Msphlpr.dll
11-Sep-2003  23:37  3.0.1200.292  392,464  W3proxy.exe
11-Sep-2003  23:37  3.0.1200.292  299,280  Wspsrv.exe

STATUS

Microsoft has confirmed that this is a problem in Microsoft Internet Security and Acceleration Server 2000.
Modification Type:MinorLast Reviewed:10/28/2005
Keywords:kbHotfixServer kbQFE kbQFE kbISAServ2000preSP2fix kbfix kbbug kbFirewall KB828044 kbAudITPRO
©2004 Microsoft Corporation. All rights reserved.