The Microsoft Firewall service stops responding to client computer requests and Event IDs 7034, 14057, and 1000 are logged after you publish an Outlook Web Access server in ISA Server 2004 (923765)


The information in this article applies to:

  • Microsoft Internet Security and Acceleration Server 2004, Standard Edition
  • Microsoft Internet Security and Acceleration Server 2004, Enterprise Edition

SYMPTOMS

After you publish a Microsoft Exchange Outlook Web Access (OWA) server by using Microsoft Internet Security and Acceleration (ISA) Server 2004, you may experience the following symptoms:
  • The Microsoft Firewall service stops responding to client computer requests.
  • The following events are logged in the Application log.

    Event ID: 7034

    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7034
    Date: Date
    Time: Time
    User: Not applicable
    Computer: ServerName
    Description: The Microsoft Firewall service terminated unexpectedly. It has done this 1 time(s).

    Event ID: 14057

    Event Type: Error
    Event Source: Microsoft Firewall
    Event Category: None
    Event ID: 14057
    Date: Date
    Time: Time
    User: Not applicable
    Computer: ServerName
    Description: The Firewall service stopped because an application filter module C:\Program Files\Microsoft ISA Server\w3filter.dll generated an exception code C0000005 in address 6471CD51 when function CompleteAsyncIO was called. To resolve this error, remove recently installed application filters and restart the service.

    Event ID: 1000

    Event Type: Error
    Event Source: Microsoft ISA Server 2004
    Event Category: None
    Event ID: 1000
    Date: Date
    Time: Time
    User: Not applicable
    Computer: ServerName
    Description: Faulting application wspsrv.exe, version 4.0.2165.594, stamp 43cd50a5, faulting module w3filter.dll, version 4.0.2165.594, stamp 43cd5092, debug? 0, fault address 0x0002cd51.

CAUSE

This problem occurs because of a code problem in the ISA Server 2004 forms-based authentication filter (Cookieauthfilter.dll). This code problem may cause the Microsoft Firewall service to crash.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

MORE INFORMATION

For more information, click the following article number to view the article in the Microsoft Knowledge Base:

885957 How to install ISA Server 2004 hotfixes and updates

Modification Type:MajorLast Reviewed:9/6/2006
Keywords:kbEventLog kbfix kbBug kbtshoot kbFirewall kbprb KB923765 kbAudITPRO
©2004 Microsoft Corporation. All rights reserved.