Discussion:
Eventid 14057 - ISA Microsoft Firewall service crashing
(too old to reply)
Mark
2007-03-23 02:12:02 UTC
Permalink
Good Afternoon everyone,

Our ISA 2006 Microsoft Firewall service keeps stopping couple times a day. I
have reinstalled ISA 2006 and disabled Sophos, but still having no luck.

In the event logs I am getting this error:

Event Type: Error
Event Source: Microsoft Firewall
Event Category: None
Event ID: 14057
Description:
The Firewall service stopped because an application filter module C:\Program
Files\Microsoft ISA Server\StrmFltr.dll generated an exception code C0000005
in address 641D802E when function CompleteAsyncIO was called. To resolve this
error, remove recently installed application filters and restart the service.

and this one

Event Type: Error
Event Source: Microsoft ISA Server 2006
Event Category: None
Event ID: 1000
Computer: STELLAISA
Description:
Faulting application wspsrv.exe, version 5.0.5720.100, stamp 44a3a98a,
faulting module strmfltr.dll, version 5.0.5720.100, stamp 44a3a98c, debug? 0,
fault address 0x0001802e.

the last error I get is related to disk cache - Eventid 14176

Cheers,

Mark
Volki
2007-03-27 23:10:40 UTC
Permalink
One suggestion. If it is ok, please change your logging method from MSDE to
isa log system (w3c) to see. Because most of the firewall service stop
related problems are about logging (if the isa can not log it stops).

By the way, one more thing. If you have an antivirus software, never let it
to scan the log files right? This can be the source of the problem!!!
--
Volkan
Systems Support Specialist
MCSE 2003, MCSA 2003, CCNA
Hey Volki,
Our logging method is local - MSDE. We have content filtering installed -
Smartfilter (SecureFiltering). Both ISA and Smartfilter has been installed,
but yet I am still getting this problem. I am also finding it really hard to
find out what is causing the problem. We removed smartfilter too and was
getting same error.
Any ideas?
Cheers,
Mark
Hi,
it is very difficult in this scenerio to find out what is the problem.
However I have some questins. What is your looging method? SQL or local file?
and one more thing, are you using any ISA add on like websense?
Thanks.
--
Volkan
Systems Support Specialist
MCSE 2003, MCSA 2003, CCNA
Post by Mark
Good Afternoon everyone,
Our ISA 2006 Microsoft Firewall service keeps stopping couple times a day. I
have reinstalled ISA 2006 and disabled Sophos, but still having no luck.
Event Type: Error
Event Source: Microsoft Firewall
Event Category: None
Event ID: 14057
The Firewall service stopped because an application filter module C:\Program
Files\Microsoft ISA Server\StrmFltr.dll generated an exception code C0000005
in address 641D802E when function CompleteAsyncIO was called. To resolve this
error, remove recently installed application filters and restart the service.
and this one
Event Type: Error
Event Source: Microsoft ISA Server 2006
Event Category: None
Event ID: 1000
Computer: STELLAISA
Faulting application wspsrv.exe, version 5.0.5720.100, stamp 44a3a98a,
faulting module strmfltr.dll, version 5.0.5720.100, stamp 44a3a98c, debug? 0,
fault address 0x0001802e.
the last error I get is related to disk cache - Eventid 14176
Cheers,
Mark
Mark
2007-03-28 00:56:01 UTC
Permalink
Hey Volki,

Our logging method is local - MSDE. We have content filtering installed -
Smartfilter (SecureFiltering). Both ISA and Smartfilter has been installed,
but yet I am still getting this problem. I am also finding it really hard to
find out what is causing the problem. We removed smartfilter too and was
getting same error.

Any ideas?

Cheers,

Mark
Hi,
it is very difficult in this scenerio to find out what is the problem.
However I have some questins. What is your looging method? SQL or local file?
and one more thing, are you using any ISA add on like websense?
Thanks.
--
Volkan
Systems Support Specialist
MCSE 2003, MCSA 2003, CCNA
Post by Mark
Good Afternoon everyone,
Our ISA 2006 Microsoft Firewall service keeps stopping couple times a day. I
have reinstalled ISA 2006 and disabled Sophos, but still having no luck.
Event Type: Error
Event Source: Microsoft Firewall
Event Category: None
Event ID: 14057
The Firewall service stopped because an application filter module C:\Program
Files\Microsoft ISA Server\StrmFltr.dll generated an exception code C0000005
in address 641D802E when function CompleteAsyncIO was called. To resolve this
error, remove recently installed application filters and restart the service.
and this one
Event Type: Error
Event Source: Microsoft ISA Server 2006
Event Category: None
Event ID: 1000
Computer: STELLAISA
Faulting application wspsrv.exe, version 5.0.5720.100, stamp 44a3a98a,
faulting module strmfltr.dll, version 5.0.5720.100, stamp 44a3a98c, debug? 0,
fault address 0x0001802e.
the last error I get is related to disk cache - Eventid 14176
Cheers,
Mark
Volki
2007-03-28 00:56:33 UTC
Permalink
Hi,
it is very difficult in this scenerio to find out what is the problem.
However I have some questins. What is your looging method? SQL or local file?
and one more thing, are you using any ISA add on like websense?
Thanks.
--
Volkan
Systems Support Specialist
MCSE 2003, MCSA 2003, CCNA
Post by Mark
Good Afternoon everyone,
Our ISA 2006 Microsoft Firewall service keeps stopping couple times a day. I
have reinstalled ISA 2006 and disabled Sophos, but still having no luck.
Event Type: Error
Event Source: Microsoft Firewall
Event Category: None
Event ID: 14057
The Firewall service stopped because an application filter module C:\Program
Files\Microsoft ISA Server\StrmFltr.dll generated an exception code C0000005
in address 641D802E when function CompleteAsyncIO was called. To resolve this
error, remove recently installed application filters and restart the service.
and this one
Event Type: Error
Event Source: Microsoft ISA Server 2006
Event Category: None
Event ID: 1000
Computer: STELLAISA
Faulting application wspsrv.exe, version 5.0.5720.100, stamp 44a3a98a,
faulting module strmfltr.dll, version 5.0.5720.100, stamp 44a3a98c, debug? 0,
fault address 0x0001802e.
the last error I get is related to disk cache - Eventid 14176
Cheers,
Mark
Loading...