ISA Server detected a network adapter connected to multiple networks

Microsoft.ISAServer.2006.ISA_Server_detected_a_network_adapter_connected_to_multiple_networks.Rule (Rule)

This Rule generates alerts when ISA Server detected a network adapter connected to multiple networks

Knowledge Base article:

Summary

ISA Server detected a network containing an invalid address range.

Causes

The network configuration is either invalid or it does not match the machine’s routing table.

Resolutions

Review the network elements. Verify that address ranges do not conflict and that they are specified correctly.

Element properties:

Target	Microsoft.ISAServer.2006.ServerRole
Category	EventCollection
Enabled	True
Alert Generate	False
Remotable	True

Member Modules:

ID	Module Type	TypeId	RunAs
DS	DataSource	Microsoft.ISAServer.2006.Rule.AlertGenerate.DS	Default
WA	WriteAction	Microsoft.ISAServer.2006.Rule.AlertGenerate.WA	Default

Source Code:

<Rule ID="Microsoft.ISAServer.2006.ISA_Server_detected_a_network_adapter_connected_to_multiple_networks.Rule" Enabled="onEssentialMonitoring" Target="Microsoft.ISAServer.2006.ServerRole" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="DS" TypeID="Microsoft.ISAServer.2006.Rule.AlertGenerate.DS">

      <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>Application</LogName>

      <EventsPattern>^(21125)$</EventsPattern>

      <EventType>1</EventType>

      <SourcePattern>Microsoft Firewall</SourcePattern>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="WA" TypeID="Microsoft.ISAServer.2006.Rule.AlertGenerate.WA">

      <AlertMessageId>$MPElement[Name="Microsoft.ISAServer.2006.ISA_Server_detected_a_network_adapter_connected_to_multiple_networks.AlertMessage"]$</AlertMessageId>

      <DomainName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/DomainDnsName$</DomainName>

      <Priority>2</Priority>

      <Severity>2</Severity>

    </WriteAction>

  </WriteActions>

</Rule>