This Rule generates alerts when A shortage of available memory caused the Firewall service to fail
A shortage of available memory caused the Firewall service to fail.
The ISA Server computer cannot support additional connections for the server.; The Event Viewer Data window displays the number of active connections.
Check the number of current connections and reduce that number to an acceptable level.
To address a low physical memory condition, do one of the following:
Close or stop one or more applications, services, processes
Add physical memory to the computer
Move applications to one or more additional servers
If the system has been adequately provisioned with physical memory and application load but it continually exceeds the available physical memory threshold over time, it is possible that an application is leaking memory. To identify an application that is leaking memory, do the following:
Open System Monitor and monitor the following system wide performance counters over time: Paging File\% Usage, Paging File\% Usage Peak, Memory\Pool Nonpaged Bytes, Memory\Pool Paged Bytes. If any one of these counters continually increase over time, it is possible that an application may be leaking memory.
If the system appears to be leaking memory, the specific application can be identified by monitoring the following counters for each running process:o Process\Page File Byteso Process\Pool Nonpaged Byteso Process\Pool Paged Byteso Process\Private Byteso Process\Thread Count
If you observe a consistent and significant increase in any of these counters, it may be necessary to contact the application vendor for support.
| Target | Microsoft.ISAServer.2006.ServerRole |
| Category | EventCollection |
| Enabled | True |
| Alert Generate | False |
| Remotable | True |
| ID | Module Type | TypeId | RunAs |
|---|---|---|---|
| DS | DataSource | Microsoft.ISAServer.2006.Rule.AlertGenerate.DS | Default |
| WA | WriteAction | Microsoft.ISAServer.2006.Rule.AlertGenerate.WA | Default |
Home<Rule ID="Microsoft.ISAServer.2006.A_shortage_of_available_memory_caused_the_Firewall_service_to_fail.Rule" Enabled="onEssentialMonitoring" Target="Microsoft.ISAServer.2006.ServerRole" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="DS" TypeID="Microsoft.ISAServer.2006.Rule.AlertGenerate.DS">
<ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>Application</LogName>
<EventsPattern>^(14007)$</EventsPattern>
<EventType>1</EventType>
<SourcePattern>Microsoft Firewall</SourcePattern>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="WA" TypeID="Microsoft.ISAServer.2006.Rule.AlertGenerate.WA">
<AlertMessageId>$MPElement[Name="Microsoft.ISAServer.2006.A_shortage_of_available_memory_caused_the_Firewall_service_to_fail.AlertMessage"]$</AlertMessageId>
<DomainName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/DomainDnsName$</DomainName>
<Priority>2</Priority>
<Severity>2</Severity>
</WriteAction>
</WriteActions>
</Rule>