This Rule generates alerts when Failed to start the Routing and Remote Access service
Failed to start the Routing and Remote Access service.
This failure may occur for one of the following reasons:
There is no connectivity to the RADIUS server.
The Routing and Remote Access service configuration might be invalid.
The registry might be corrupted.
Low memory resource.
The RADIUS server is configured to serve only the Accounting function (and not the Authentication function), while ISA Server requires both functions.
Check the system event log for events from the RemoteAccess service or from the Service Control Manager (SCM) to determine the cause of the problem.
Disable and re-enable VPN in ISA Server.
Close other programs that are running. Use the Task Manager to check programs and processes that are using large amounts of system resources.
Try to restore the most recent registry backup.
Target | Microsoft.ISAServer.2006.VPN.ServerRole |
Category | EventCollection |
Enabled | True |
Alert Generate | False |
Remotable | True |
ID | Module Type | TypeId | RunAs |
---|---|---|---|
DS | DataSource | Microsoft.ISAServer.2006.Rule.AlertGenerate.DS | Default |
WA | WriteAction | Microsoft.ISAServer.2006.Rule.AlertGenerate.WA | Default |
<Rule ID="Microsoft.ISAServer.2006.Failed_to_start_the_Routing_and_Remote_Access_service.Rule" Enabled="onEssentialMonitoring" Target="Microsoft.ISAServer.2006.VPN.ServerRole" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="DS" TypeID="Microsoft.ISAServer.2006.Rule.AlertGenerate.DS">
<ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>Application</LogName>
<EventsPattern>^(14104)$</EventsPattern>
<EventType>1</EventType>
<SourcePattern>Microsoft Firewall</SourcePattern>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="WA" TypeID="Microsoft.ISAServer.2006.Rule.AlertGenerate.WA">
<AlertMessageId>$MPElement[Name="Microsoft.ISAServer.2006.Failed_to_start_the_Routing_and_Remote_Access_service.AlertMessage"]$</AlertMessageId>
<DomainName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/DomainDnsName$</DomainName>
<Priority>2</Priority>
<Severity>2</Severity>
</WriteAction>
</WriteActions>
</Rule>