The SSL server certificate used by a published server expired or is not yet valid

Microsoft.ISAServer.2006.The_SSL_server_certificate_used_by_a_published_server_expired_or_is_not_yet_valid.Rule (Rule)

This Rule generates alerts when The SSL server certificate used by a published server expired or is not yet valid

Knowledge Base article:

Summary

The Web Proxy filter could not be initialized.

Causes

The event may be caused by a shortage of memory, an internal error, or corruption in the registry. If the problem is in the registry, it may be the result of changes made to the registry with a tool, such as regedit.exe.

Resolutions

Report the error location to Microsoft.
Stop and then restart the Firewall service.
If the problem persists, you may need to uninstall and then reinstall ISA Server.

Element properties:

Target	Microsoft.ISAServer.2006.Publishing.ServerRole
Category	EventCollection
Enabled	True
Alert Generate	False
Remotable	True

Member Modules:

ID	Module Type	TypeId	RunAs
DS	DataSource	Microsoft.ISAServer.2006.Rule.AlertGenerate.DS	Default
WA	WriteAction	Microsoft.ISAServer.2006.Rule.AlertGenerate.WA	Default

Source Code:

<Rule ID="Microsoft.ISAServer.2006.The_SSL_server_certificate_used_by_a_published_server_expired_or_is_not_yet_valid.Rule" Enabled="onEssentialMonitoring" Target="Microsoft.ISAServer.2006.Publishing.ServerRole" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="DS" TypeID="Microsoft.ISAServer.2006.Rule.AlertGenerate.DS">

      <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>Application</LogName>

      <EventsPattern>^(23406)$</EventsPattern>

      <EventType>1</EventType>

      <SourcePattern>Microsoft ISA Server Web Proxy</SourcePattern>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="WA" TypeID="Microsoft.ISAServer.2006.Rule.AlertGenerate.WA">

      <AlertMessageId>$MPElement[Name="Microsoft.ISAServer.2006.The_SSL_server_certificate_used_by_a_published_server_expired_or_is_not_yet_valid.AlertMessage"]$</AlertMessageId>

      <DomainName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/DomainDnsName$</DomainName>

      <Priority>1</Priority>

      <Severity>2</Severity>

    </WriteAction>

  </WriteActions>

</Rule>