The Web Proxy filter failed to connect to one of the array members

Microsoft.ISAServer.2006.The_Web_Proxy_filter_failed_to_connect_to_one_of_the_array_members.Rule (Rule)

This Rule generates alerts when The Web Proxy filter failed to connect to one of the array members

Knowledge Base article:

Summary

The Web Proxy filter failed to create a network socket because there are no available ports on this computer.

Causes

There are no available ports on this computer. Note that ISA Server already reset the maximal port number to 65535.

Resolutions

Verify that the value at HKLM\System\CurrentControlSet\Services\TcpIp\Parameters\MaxUsePort is set to 65535 and restart the computer to apply this change.

Element properties:

Target	Microsoft.ISAServer.2006.WebProxy.ServerRole
Category	EventCollection
Enabled	True
Alert Generate	False
Remotable	True

Member Modules:

ID	Module Type	TypeId	RunAs
DS	DataSource	Microsoft.ISAServer.2006.Rule.AlertGenerate.DS	Default
WA	WriteAction	Microsoft.ISAServer.2006.Rule.AlertGenerate.WA	Default

Source Code:

<Rule ID="Microsoft.ISAServer.2006.The_Web_Proxy_filter_failed_to_connect_to_one_of_the_array_members.Rule" Enabled="onEssentialMonitoring" Target="Microsoft.ISAServer.2006.WebProxy.ServerRole" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="DS" TypeID="Microsoft.ISAServer.2006.Rule.AlertGenerate.DS">

      <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>Application</LogName>

      <EventsPattern>^(14132)$</EventsPattern>

      <EventType>2</EventType>

      <SourcePattern>Microsoft ISA Server Web Proxy</SourcePattern>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="WA" TypeID="Microsoft.ISAServer.2006.Rule.AlertGenerate.WA">

      <AlertMessageId>$MPElement[Name="Microsoft.ISAServer.2006.The_Web_Proxy_filter_failed_to_connect_to_one_of_the_array_members.AlertMessage"]$</AlertMessageId>

      <DomainName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/DomainDnsName$</DomainName>

      <Priority>0</Priority>

      <Severity>1</Severity>

    </WriteAction>

  </WriteActions>

</Rule>