%1 failed to start. The failure occurred during %5 because the configuration property %4 of key %3 is not valid. Use the source location %6 to report the failure. The error code in the Data area of the event properties indicates the cause of the failure. For more information about this event, see ISA Server Help. The error description is: %2.

Details
Product: Internet Security and Acceleration Server
Event ID: 11002
Source: Microsoft Firewall
Version: 3.0
Message:

%1 failed to start. The failure occurred during %5 because the configuration property %4 of key %3 is not valid. Use the source location %6 to report the failure. The error code in the Data area of the event properties indicates the cause of the failure. For more information about this event, see ISA Server Help. The error description is: %2.

   
Explanation

Service failed to start because the data in the storage is corrupt, due to incorrect configuration of either the registry or Active Directory.

   
User Action

If a backup exists, in ISA Management click Servers and Arrays, then right-click Name, and choose Restore. This will restore the configuration, except for server-specific configuration information, such as cache content. If this does not solve the problem, uninstall ISA Server from the Control Panel. You will lose all the configuration parameters and will have to reinstall. Reinstalling a new copy of ISA Server without uninstalling the previous copy will not solve the problem.

Related:

The action to summarize all period summaries from the array, into report “%1” failed. The error description is: %2. Use the source location %3 to report the failure.

Details
Product: Internet Security and Acceleration Server
Event ID: 21022
Source: SOCKS Filter
Version: 4.0.3443.594
Component: ISA Server Services
Message: The action to summarize all period summaries from the array, into report “%1” failed. The error description is: %2. Use the source location %3 to report the failure.
   
Explanation
This failure may occur for one of the following reasons:
The log summary configuration is invalid.The log summaries can not be accessed.The merged log summary cannot be created.
   
User Action
Review other alerts to determine the cause of the problem.
Check the validity of the log summary configuration.
Check that there is enough disk space on the ISA Server computer generating the report.

Related:

ISA Server failed to reduce the size of %1 cache file.

ISA Server failed to initialize due to a corrupted registry. Restart the service. If this does not resolve the problem, reinstall the server to replace any missing files. If the condition persists, restore the registry. Error Code %1, Key=’%2′, Value=’%3′.

Details
Product: Internet Security and Acceleration Server
Event ID: 14145
Source: ISA Server LDAP Filter
Version: 4.0.3443.594
Component: ISA Server Services
Message: ISA Server failed to initialize due to a corrupted registry. Restart the service. If this does not resolve the problem, reinstall the server to replace any missing files. If the condition persists, restore the registry. Error Code %1, Key=’%2′, Value=’%3′.
   
Explanation
The configuration could not be read from the storage because it is corrupted.
   
User Action
Restart the service. If this does not resolve the problem, and a backup of a previous configuration exists, use the backup to restore the configuration. For details about restoring a configuration, see ISA Server help. If this does not resolve the problem, you may need to reinstall the server to replace any missing files. If the condition persists, restore the registry.

Related:

Microsoft ISA Server SMTP Message Screener held a mail message in the BadMail queue because the message arrived while in lockdown mode. Further events of this type will not be reported to the Event Log until the service is restarted.

Details
Product: Internet Security and Acceleration Server
Event ID: 21134
Source: ISA Server H.323 Filter
Version: 4.0.3443.594
Component: ISA Server Services
Message: Microsoft ISA Server SMTP Message Screener held a mail message in the BadMail queue because the message arrived while in lockdown mode. Further events of this type will not be reported to the Event Log until the service is restarted.
   
Explanation
The initial configuration could not be read, and the filter is in lockdown mode. Mail messages arriving are put in BadMail queue until the configuration is retrieved.
   
User Action
Verify there is connectivity from the Message Screener filter computer to the ISA Server computer.

Related:

The Firewall service stopped because an application filter module %1 generated an exception code %3 in address %2 when function %4 was called. To resolve this error, remove recently installed application filters and restart the service.

Details
Product: Internet Security and Acceleration Server
Event ID: 14057
Source: SOCKS Filter
Version: 4.0.3443.594
Component: ISA Server Services
Message: The Firewall service stopped because an application filter module %1 generated an exception code %3 in address %2 when function %4 was called. To resolve this error, remove recently installed application filters and restart the service.
   
Explanation
An application filter contains an invalid command.
   
User Action
After removing the application filter, restart the Firewall service. To restart the service, in the console tree of ISA Server Managment, click Monitoring, then in the details pane, click the Services tab. In the details pane, select the Firewall service, then in the Tasks tab, click Start.
If this does not resolve the problem, contact the component vendor.

Related:

%1 encountered a failure. The failure occurred during %5 because the configuration property %4 of key %3 is not valid. Use the source location %6 to report the failure. For more information about this event, see ISA Server Help. %2%0

Details
Product: Internet Security and Acceleration Server
Event ID: 11003
Source: POP Intrusion Detection Filter
Version: 4.0.3443.594
Component: ISA Server Services
Message: %1 encountered a failure. The failure occurred during %5 because the configuration property %4 of key %3 is not valid. Use the source location %6 to report the failure. For more information about this event, see ISA Server Help. %2%0
   
Explanation
This event occurs with the service failed to start because the data in the storage is corrupt. This may be due to incorrect configuration of either the registry or Active Directory.
   
User Action
Review other events to determine the cause of the problem.If a backup exists, use the ISA Server Restore option to restore the backed-up configuration. For details about restoring an ISA Server configuration, see ISA Server Help.If you are unable to restore the configuration, or doing so does not solve the problem, then uninstall and subsequently reinstall ISA Server. When you uninstall, all the configuration information is discarded. Do not reinstall ISA Server without first uninstalling.

Related:

A network adapter ‘%1’ matching network ‘%2’ was found, but it does not have a static IP address that can be used as a dedicated IP. (Either DHCP is enabled or the IP address specified is used as the Virtual IP.) Network Load Balancing cannot be configured properly, and will be stopped on this server.

Details
Product: Internet Security and Acceleration Server
Event ID: 21114
Source: SOCKS Filter
Version: 4.0.3443.594
Component: ISA Server Services
Message: A network adapter ‘%1’ matching network ‘%2’ was found, but it does not have a static IP address that can be used as a dedicated IP. (Either DHCP is enabled or the IP address specified is used as the Virtual IP.) Network Load Balancing cannot be configured properly, and will be stopped on this server.
   
Explanation
The Firewall service may fail to find a suitable network adapter due for one of the following reasons:
No network adapter exists with the IP address in the range of the NLB-enabled network.The IP configured on the adapter is in the range of the NLB-enabled networks, but the adapter is DHCP-enabled.There is no additional network adapter for intra-array communication (on Windows Server 2003 computers without Service Pack 1 installed).There are IP conflicts on one of the network adapters.
   
User Action
Change the network ranges of the NLB enabled network so they contain all the IP addresses of a network adapter which is non-DHCP enabled.Add an additional network adapter for intra-array communication.
Check that the Virtual IP (VIP) you selected for the NLB-enabled network is not also configured as a Dedicated IP (DIP) of other computers in the subnet.
For more information about NLB, see the Network Load Balancing topic in ISA Server Help..
For more information about Microsoft implementation of load balancing protocol look for Network Load Balancing (NLB) topic in http://msdn.microsoft.com.

Related:

The Firewall service failed to determine the network addresses, either due to improper network connections or insufficient memory. Check the network connections and then restart the service. If this problem occurs again, close some applications, stop the service, and then restart the service.

Details
Product: Internet Security and Acceleration Server
Event ID: 14016
Source: Microsoft ISA Server Report Generator
Version: 4.0.3443.594
Component: ISA Server Services
Message: The Firewall service failed to determine the network addresses, either due to improper network connections or insufficient memory. Check the network connections and then restart the service. If this problem occurs again, close some applications, stop the service, and then restart the service.
   
Explanation
This event occurs when the network is not configured properly or there is not enough available memory.
   
User Action
To restart the service, in console tree of ISA Server Management, click Monitoring. In the details pane, click the Services tab. Select the service, and then on the Tasks tab click Stop. When the service has stopped, select the service, and then on the Tasks tab, click Start Service.

Related:

The network is not properly configured. The server address is not internal and is not in the local address table (LAT). For more information about this event, see ISA Server Help.

Details
Product: Internet Security and Acceleration Server
Event ID: 14017
Source: ISA Server NNTP Filter
Version: 4.0.3443.594
Component: ISA Server Services
Message: The network is not properly configured. The server address is not internal and is not in the local address table (LAT). For more information about this event, see ISA Server Help.
   
Explanation
An Internet Protocol (IP) address configured for the internal network adapter for the server needs to be included within the Internal network.
   
User Action
To modify the Internal network, follow these steps:In the console tree of ISA Server Management, click Configuration. In the details pane, click the Networks tab. Select the Internal network, and then on the Tasks tab, click Edit Selected Network. In the Networks property page, edit the IP addresses configured for the Internal network.

Related: