This Rule generates alerts when The Microsoft Firewall service was unable to connect to the MSDE database
The Microsoft Firewall service generates this event when the ActiveX Data Objects (ADO) connection object could not be opened. ADO allows applications to access data in a database management system (DBMS). It uses a connection object to access the data source. The connection object is used by the Firewall service to manage MSDE databases. The first parameter of the event contains the name of the logging component (Firewall or Web Proxy). The second parameter of the event contains the error description received from the Microsoft Data Engine service.
Opening an ADO connection can fail for one of the following reasons:
The service does not have appropriate permission.
Low resources on the computer.
The Microsoft Data Engine (MSSQL$MSFW) service is not started.
Close other programs that are running. Use the Task Manager to check programs and processes using large amounts of system resources.
Start the MSDE service. In ISA Server Management, click Monitoring. On the Services tab, right-click the Microsoft Data Engine service and then click Start.
Verify that you have assigned appropriate permissions for the ISA Server services.
For more information about ISA Server logs, refer to the "Logs" topic in the ISA Server on-line help.
| Target | Microsoft.ISAServer.2006.Logging.Advanced |
| Category | EventCollection |
| Enabled | True |
| Alert Generate | False |
| Remotable | True |
| ID | Module Type | TypeId | RunAs |
|---|---|---|---|
| DS | DataSource | Microsoft.ISAServer.2006.Rule.AlertGenerate.DS | Default |
| WA | WriteAction | Microsoft.ISAServer.2006.Rule.AlertGenerate.WA | Default |
Home<Rule ID="Microsoft.ISAServer.2006.The_Microsoft_Firewall_service_was_unable_to_connect_to_the_MSDE_database.Rule" Enabled="onEssentialMonitoring" Target="Microsoft.ISAServer.2006.Logging.Advanced" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="DS" TypeID="Microsoft.ISAServer.2006.Rule.AlertGenerate.DS">
<ComputerName>$Target/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>Application</LogName>
<EventsPattern>^(21192)$</EventsPattern>
<EventType>1</EventType>
<SourcePattern>Microsoft Firewall</SourcePattern>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="WA" TypeID="Microsoft.ISAServer.2006.Rule.AlertGenerate.WA">
<AlertMessageId>$MPElement[Name="Microsoft.ISAServer.2006.The_Microsoft_Firewall_service_was_unable_to_connect_to_the_MSDE_database.AlertMessage"]$</AlertMessageId>
<DomainName>$Target/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/DomainDnsName$</DomainName>
<Priority>2</Priority>
<Severity>2</Severity>
</WriteAction>
</WriteActions>
</Rule>