You receive a "Resource allocation failure" alert on your Internet Security and Acceleration Server 2006 and on ISA Server 2004 computer (888650)


The information in this article applies to:

  • Microsoft Internet Security and Acceleration Server 2004, Enterprise Edition
  • Microsoft Internet Security and Acceleration Server 2004, Standard Edition
  • Microsoft Internet Security and Acceleration Server 2006 Enterprise Edition
  • Microsoft Internet Security and Acceleration Server 2006 Standard Edition

SYMPTOMS

On your Microsoft Internet Security and Acceleration (ISA) Server computer, the following alert may appear in the ISA Server Management tool after you expand your ISA Server computer name, click Monitoring, and then click the Alerts tab:
Resource allocation failure
The alert description is similar to the following:
Description: The Web Proxy filter failed to bind its socket to IP_address port 80. This may have been caused by another service that is already using the same port or by a network adapter that is not functional. To resolve this issue, restart the Microsoft Firewall service. The error code specified in the data area of the event properties indicates the cause of the failure. The failure is due to error: 0x80072740.
Note The same description is repeated for the IP address 127.0.0.1.

If you restart the Microsoft Firewall service, the alert is logged again.

When you receive the alert, you may experience either or both of the following symptoms:
  • Clients that are configured to use automatic discovery cannot connect to the ISA Server computer.
  • Users cannot connect to a Web site that is published through a Web publishing rule on your ISA Server computer. The Web publishing rule uses a listener that is configured to use port 80.

CAUSE

This issue occurs if the following conditions are true:
  • You have other programs installed on your ISA Server computer. For example, you are running Microsoft Internet Information Services (IIS).
  • Another program is already using the port that ISA Server needs for a listener. For example, ISA Server creates listeners for Web publishing rules and for components, such as automatic discovery, Web Proxy, and the Firewall Client.
Note A resource allocation failure means that two programs are trying to bind to the same socket. A socket is the combination of the IP address and the port.

WORKAROUND

To work around this issue, do not configure ISA Server and another program to use the same socket. If you can, remove any programs that are installed on your ISA Server computer and that may be using a port that ISA Server needs for a listener. If IIS is the other program that is running on your ISA Server computer, you can do any one of the following:
  • Remove IIS if you are not using it.
  • Disable socket pooling in IIS, and then configure IIS to listen on any port besides port 80 and port 8080. Also, make sure that you configure IIS to listen only on a specific IP address.

    Note In Microsoft Windows 2000 Server, IIS is installed by default. Also, the default installation listens on all unassigned IP addresses.

    For additional information about how to disable socket pooling if ISA Server 2004 is installed on a Windows 2000 Server-based computer, click the following article numbers to view the articles in the Microsoft Knowledge Base:

    238131 How to disable socket pooling

    259349 IIS binds to all available IP addresses when it starts


    For additional information about how to disable socket pooling if ISA Server 2004 is installed on a Microsoft Windows Server 2003-based computer, click the following article number to view the article in the Microsoft Knowledge Base:

    813368 Setting metabase property DisableSocketPooling has no effect in IIS 6.0

    Note If IIS is installed on your ISA Server computer, and you want to use automatic discovery, we recommend that you configure IIS to use another port instead of port 80. ISA Server 2004 uses TCP port 80 to publish automatic discovery information. If you do configure IIS to use another port, users must specify a port if they connect to a Web site that is published directly on your ISA Server computer.
  • Disable socket pooling, and let IIS listen on port 80 for any network except for the external network. If you do this, remember that automatic discovery will not work.

MORE INFORMATION

For additional information about how to publish a Web site directly on your ISA Server 2004 computer, click the following article number to view the article in the Microsoft Knowledge Base:

885186 How to publish a Web site directly on your Internet Security and Acceleration Server 2004 computer

Modification Type:MinorLast Reviewed:9/22/2006
Keywords:kbISA2006Swept kbtshoot kbFirewall kbprb KB888650 kbAudITPRO
©2004 Microsoft Corporation. All rights reserved.