The Firewall service requires Windows Server 2000 Service Pack 4 or Windows Server 2003

Microsoft.ISAServer.2006.The_Firewall_service_requires_Windows_Server_2000_Service_Pack_4_or_Windows_Server_2003.Rule (Rule)

This Rule generates alerts when The Firewall service requires Windows Server 2000 Service Pack 4 or Windows Server 2003

Knowledge Base article:

Summary

The Microsoft Firewall service stopped because an application filter module generated an exception code.

Causes

An application filter contains an invalid command.

Resolutions

After removing the application filter, restart the Firewall service. To do this, in ISA Server Management, click Monitoring. In the details pane, click the Services tab, and then select Microsoft Firewall service. On the Tasks tab, click Start Selected Services.

If this does not resolve the problem, contact the component vendor.

Element properties:

TargetMicrosoft.ISAServer.2006.ServerRole
CategoryEventCollection
EnabledTrue
Alert GenerateFalse
RemotableTrue

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.ISAServer.2006.Rule.AlertGenerate.DS Default
WA WriteAction Microsoft.ISAServer.2006.Rule.AlertGenerate.WA Default

Source Code:

<Rule ID="Microsoft.ISAServer.2006.The_Firewall_service_requires_Windows_Server_2000_Service_Pack_4_or_Windows_Server_2003.Rule" Enabled="onEssentialMonitoring" Target="Microsoft.ISAServer.2006.ServerRole" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="DS" TypeID="Microsoft.ISAServer.2006.Rule.AlertGenerate.DS">
<ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>Application</LogName>
<EventsPattern>^(14014)$</EventsPattern>
<EventType>1</EventType>
<SourcePattern>Microsoft Firewall</SourcePattern>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="WA" TypeID="Microsoft.ISAServer.2006.Rule.AlertGenerate.WA">
<AlertMessageId>$MPElement[Name="Microsoft.ISAServer.2006.The_Firewall_service_requires_Windows_Server_2000_Service_Pack_4_or_Windows_Server_2003.AlertMessage"]$</AlertMessageId>
<DomainName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/DomainDnsName$</DomainName>
<Priority>2</Priority>
<Severity>2</Severity>
</WriteAction>
</WriteActions>
</Rule>