This Rule generates alerts when Failed to resolve a remote gateway address specified for VPN site-to-site network
The name specified as the remote gateway for site-to-site network cannot be resolved. As a result, the VPN connection cannot be established to the remote network.
In addition, if the array is NLB enabled, the traffic from this network may be handled by the wrong server.
The name specified as the remote gateway for site-to-site network is wrong.
Name resolution services are not working properly
Check that the remote gateway name is resolvable and change it if needed
Specify an IP address instead of a server name
For more information about NLB, see Network Load Balancing topic in ISA server documentation.
For more information about the Microsoft implementation of load balancing protocol, see Network Load Balancing (NLB) topic in http://msdn.microsoft.com
Target | Microsoft.ISAServer.2006.VPN.ServerRole |
Category | EventCollection |
Enabled | True |
Alert Generate | False |
Remotable | True |
ID | Module Type | TypeId | RunAs |
---|---|---|---|
DS | DataSource | Microsoft.ISAServer.2006.Rule.AlertGenerate.DS | Default |
WA | WriteAction | Microsoft.ISAServer.2006.Rule.AlertGenerate.WA | Default |
<Rule ID="Microsoft.ISAServer.2006.Failed_to_resolve_a_remote_gateway_address_specified_for_VPN_site_to_site_network.Rule" Enabled="onEssentialMonitoring" Target="Microsoft.ISAServer.2006.VPN.ServerRole" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="DS" TypeID="Microsoft.ISAServer.2006.Rule.AlertGenerate.DS">
<ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>Application</LogName>
<EventsPattern>^(21255)$</EventsPattern>
<EventType>2</EventType>
<SourcePattern>Microsoft Firewall</SourcePattern>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="WA" TypeID="Microsoft.ISAServer.2006.Rule.AlertGenerate.WA">
<AlertMessageId>$MPElement[Name="Microsoft.ISAServer.2006.Failed_to_resolve_a_remote_gateway_address_specified_for_VPN_site_to_site_network.AlertMessage"]$</AlertMessageId>
<DomainName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/DomainDnsName$</DomainName>
<Priority>1</Priority>
<Severity>2</Severity>
</WriteAction>
</WriteActions>
</Rule>