| DisplayName | Description | ID | Target | Category | Enabled | Instance Name | Counter Name | Frequency | Event_ID | Event Source | Alert Generate | Alert Severity | Alert Priority | Remotable | Event Log |
| All cache drives failed to initialize properly | This Rule generates alerts when All cache drives failed to initialize properly | Microsoft.Forefront.TMG.All_cache_drives_failed_to_initialize_properly.Rule | Microsoft.Forefront.TMG.Cache.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| All log records from the log queue were successfully formatted and moved to the appropriate formatted store | This Rule generates alerts when All log records from the log queue were successfully formatted and moved to the appropriate formatted store. | Microsoft.Forefront.TMG.All_log_records_from_the_log_queue_were_successfully_formatted_and_moved_to_the_appropriate_formatted_store.Rule | Microsoft.Forefront.TMG.Logging.TextFile | EventCollection | True | | | 0 | 0 | | False | | | True | |
| All of the local IP addresses that are specified for performing NAT to a specific network are not available | This Rule generates alerts when All of the local IP addresses that are specified for performing NAT to a specific network are not available. | Microsoft.Forefront.TMG.All_of_the_local_IP_addresses_that_are_specified_for_performing_NAT_to_a_specific_network_are_not_available.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| An application filter could not be loaded | This Rule generates alerts when An application filter could not be loaded | Microsoft.Forefront.TMG.An_application_filter_could_not_be_loaded.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| An application filter is not installed on this server | This Rule generates alerts when An application filter is not installed on this server | Microsoft.Forefront.TMG.An_application_filter_is_not_installed_on_this_server.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| An application filter performed an illegal operation inside the Firewall service process | This Rule generates alerts when An application filter performed an illegal operation inside the Firewall service process | Microsoft.Forefront.TMG.An_application_filter_performed_an_illegal_operation_inside_the_Firewall_service_process.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| An enterprise network is not included in an array level network | This Rule generates alerts when An enterprise network is not included in an array level network | Microsoft.Forefront.TMG.An_enterprise_network_is_not_included_in_an_array_level_network.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| An error occurred during an attempt to check for, download, or install definition updates | This Rule generates alerts when An error occurred during an attempt to check for, download, or install definition updates. | Microsoft.Forefront.TMG.An_error_occurred_during_an_attempt_to_check_for_download_or_install_definition_updates.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| An externally defined filter is registered to a Forefront TMG Windows Filtering Platform sub-layers | This Rule generates alerts when An externally defined filter is registered to a Forefront TMG Windows Filtering Platform sub-layers. | Microsoft.Forefront.TMG.An_externally_defined_filter_is_registered_to_a_Forefront_TMG_Windows_Filtering_Platform_sub_layers.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| An inconsistency between the Network Load Balancing configuration and the network rules was detected | This Rule generates alerts when An inconsistency between the Network Load Balancing configuration and the network rules was detected | Microsoft.Forefront.TMG.An_inconsistency_between_the_Network_Load_Balancing_configuration_and_the_network_rules_was_detected.Rule | Microsoft.Forefront.TMG.NLB.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| An insecure configuration was detected | This Rule generates alerts when An insecure configuration was detected | Microsoft.Forefront.TMG.An_insecure_configuration_was_detected.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| An invalid request to be released from quarantine was sent from a VPN NAP client | This Rule generates alerts when An invalid request to be released from quarantine was sent from a VPN NAP client | Microsoft.Forefront.TMG.An_invalid_request_to_be_released_from_quarantine_was_sent_from_a_VPN_NAP_client.Rule | Microsoft.Forefront.TMG.VPN.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| An LDAP server did not respond | This Rule generates alerts when An LDAP server did not respond | Microsoft.Forefront.TMG.An_LDAP_server_did_not_respond.Rule | Microsoft.Forefront.TMG.Publishing.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| An NLB network adapter may be used for intraarray communication | This Rule generates alerts when An NLB network adapter may be used for intraarray communication | Microsoft.Forefront.TMG.An_NLB_network_adaptor_may_be_used_for_intraarray_communication.Rule | Microsoft.Forefront.TMG.NLB.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| An array network has more than one reference to an enterprise network | This Rule generates alerts when an Forefront TMG Server array network has more than one reference to an enterprise network | Microsoft.Forefront.TMG.ArrayNetwork.Has_more_than_one_reference_to_an_enterprise_network.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| An array network has reference to a non existent enterprise network | This Rule generates alerts when an array network has reference to a non existent enterprise network | Microsoft.Forefront.TMG.ArrayNetwork.Has_reference_to_a_non_existent_enterprise_network.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| An array network overlaps with another array network | This Rule generates alerts when an Forefront TMG Server array network overlaps with another array network | Microsoft.Forefront.TMG.ArrayNetwork.Overlaps_with_another_array_network.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Two array networks include the same enterprise network | This Rule generates alerts when two array networks include the same enterprise network | Microsoft.Forefront.TMG.ArrayNetwork.Two_include_same_enterprise_network.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Attempts to check for new definition updates failed consecutively | This Rule generates alerts when Attempts to check for new definition updates failed consecutively. | Microsoft.Forefront.TMG.Attempts_to_check_for_new_definition_updates_failed_consecutively.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| A content download job was stopped | This Rule generates alerts when A content download job was stopped | Microsoft.Forefront.TMG.A_content_download_job_was_stopped.Rule | Microsoft.Forefront.TMG.VPN.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| A disk cache failed to initialize | This Rule generates alerts when A disk cache failed to initialize | Microsoft.Forefront.TMG.A_disk_cache_failed_to_initialize.Rule | Microsoft.Forefront.TMG.Cache.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| A fatal error occurred while attempting to access a certificate private key | This Rule generates alerts when A fatal error occurred while attempting to access a certificate private key | Microsoft.Forefront.TMG.A_fatal_error_occurred_while_attempting_to_access_a_certificate_private_key.Rule | Microsoft.Forefront.TMG.Publishing.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| A Forefront TMG computer may be subject to policy conflicts | This Rule generates alerts when A Forefront TMG computer may be subject to policy conflicts. | Microsoft.Forefront.TMG.A_Forefront_TMG_computer_may_be_subject_to_policy_conflicts.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| A load balanced network has no network adapter and is behind another load balanced network | This Rule generates alerts when A load balanced network has no network adapter and is behind another load balanced network | Microsoft.Forefront.TMG.A_load_balanced_network_has_no_network_adapter_and_is_behind_another_load_balanced_network.Rule | Microsoft.Forefront.TMG.NLB.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| A networks Virtual IP set is the same as the Dedicated IP of a network adapter | This Rule generates alerts when A networks Virtual IP set is the same as the Dedicated IP of a network adapter | Microsoft.Forefront.TMG.A_networks_Virtual_IP_set_is_the_same_as_the_Dedicated_IP_of_a_network_adaptor.Rule | Microsoft.Forefront.TMG.NLB.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| A network adapter was found but it does not have a static IP address that can be used as a dedicated IP | This Rule generates alerts when A network adapter was found but it does not have a static IP address that can be used as a dedicated IP | Microsoft.Forefront.TMG.A_network_adapter_was_found_but_it_does_not_have_a_static_IP_address_that_can_be_used_as_a_dedicated_IP.Rule | Microsoft.Forefront.TMG.NLB.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| A network adapter belongs to an enterprise network which is not included in an array level network | This Rule generates alerts when A network adapter belongs to an enterprise network which is not included in an array level network | Microsoft.Forefront.TMG.A_network_adaptor_belongs_to_an_enterprise_network_which_is_not_included_in_an_array_level_network.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| A network that is load balanced has a Virtual IP but this Virtual IP belongs to another network | This Rule generates alerts when A network that is load balanced has a Virtual IP but this Virtual IP belongs to another network | Microsoft.Forefront.TMG.A_network_that_is_load_balanced_has_a_Virtual_IP_but_this_Virtual_IP_belongs_to_another_network.Rule | Microsoft.Forefront.TMG.NLB.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| A network that is load balanced is behind a network that is not load balanced | This Rule generates alerts when A network that is load balanced is behind a network that is not load balanced | Microsoft.Forefront.TMG.A_network_that_is_load_balanced_is_behind_a_network_that_is_not_load_balanced.Rule | Microsoft.Forefront.TMG.NLB.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| A published RPC service cannot be reached | This Rule generates alerts when A published RPC service cannot be reached | Microsoft.Forefront.TMG.A_published_RPC_service_cannot_be_reached.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| A RADIUS server did not respond | This Rule generates alerts when A RADIUS server did not respond | Microsoft.Forefront.TMG.A_RADIUS_server_did_not_respond.Rule | Microsoft.Forefront.TMG.Publishing.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| A report could not be created | This Rule generates alerts when A report could not be created | Microsoft.Forefront.TMG.A_report_could_not_be_created.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| A report could not be created due to low memory resources | This Rule generates alerts when A report could not be created due to low memory resources | Microsoft.Forefront.TMG.A_report_could_not_be_created_due_to_low_memory_resources.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| A report could not be published | This Rule generates alerts when A report could not be published | Microsoft.Forefront.TMG.A_report_could_not_be_published.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| A report was not created | This Rule generates alerts when A report was not created | Microsoft.Forefront.TMG.A_report_was_not_created.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| A server publishing rule failed | This Rule generates alerts when A server publishing rule failed | Microsoft.Forefront.TMG.A_server_publishing_rule_failed.Rule | Microsoft.Forefront.TMG.Publishing.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| A server publishing rule failed because a runtime error occurred while processing the rule | This Rule generates alerts when A server publishing rule failed because a runtime error occurred while processing the rule | Microsoft.Forefront.TMG.A_server_publishing_rule_failed_because_a_runtime_error_occurred_while_processing_the_rule.Rule | Microsoft.Forefront.TMG.Publishing.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| A server publishing rule failed because a session cannot be created for the server | This Rule generates alerts when A server publishing rule failed because a session cannot be created for the server | Microsoft.Forefront.TMG.A_server_publishing_rule_failed_because_a_session_cannot_be_created_for_the_server.Rule | Microsoft.Forefront.TMG.Publishing.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| A server publishing rule failed because there was no valid network listener | This Rule generates alerts when A server publishing rule failed because there was no valid network listener | Microsoft.Forefront.TMG.A_server_publishing_rule_failed_because_there_was_no_valid_network_listener.Rule | Microsoft.Forefront.TMG.Publishing.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| A server publishing rule failed because the listening IP addresses specified for the rule are not valid | This Rule generates alerts when A server publishing rule failed because the listening IP addresses specified for the rule are not valid | Microsoft.Forefront.TMG.A_server_publishing_rule_failed_because_the_listening_IP_addresses_specified_for_the_rule_are_not_valid.Rule | Microsoft.Forefront.TMG.Publishing.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| A server publishing rule failed because the protocol specified cannot be used for publishing | This Rule generates alerts when A server publishing rule failed because the protocol specified cannot be used for publishing | Microsoft.Forefront.TMG.A_server_publishing_rule_failed_because_the_protocol_specified_cannot_be_used_for_publishing.Rule | Microsoft.Forefront.TMG.Publishing.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| A server publishing rule was unable to bind a socket for the server | This Rule generates alerts when A server publishing rule was unable to bind a socket for the server | Microsoft.Forefront.TMG.A_server_publishing_rule_was_unable_to_bind_a_socket_for_the_server.Rule | Microsoft.Forefront.TMG.Publishing.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| A server publishing rule was unable to bind a socket for the server because the port is already in use | This Rule generates alerts when A server publishing rule was unable to bind a socket for the server because the port is already in use | Microsoft.Forefront.TMG.A_server_publishing_rule_was_unable_to_bind_a_socket_for_the_server_because_the_port_is_already_in_use.Rule | Microsoft.Forefront.TMG.Publishing.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| A shortage of available memory caused the Firewall service to fail | This Rule generates alerts when A shortage of available memory caused the Firewall service to fail | Microsoft.Forefront.TMG.A_shortage_of_available_memory_caused_the_Firewall_service_to_fail.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| A shortage of available memory caused the Microsoft Firewall service to fail | This Rule generates alerts when A shortage of available memory caused the Microsoft Firewall service to fail | Microsoft.Forefront.TMG.A_shortage_of_available_memory_caused_the_Microsoft_Firewall_service_to_fail.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| A shortage of available memory caused the Microsoft Forefront TMG Control service to fail | This Rule generates alerts when A shortage of available memory caused the Microsoft Forefront TMG Control service to fail | Microsoft.Forefront.TMG.A_shortage_of_available_memory_caused_the_Microsoft_ISA_Server_Control_service_to_fail.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| A Virtual IP and a Dedicated IP do not have the same subnet mask or are in different subnets | This Rule generates alerts when A Virtual IP and a Dedicated IP do not have the same subnet mask or are in different subnets | Microsoft.Forefront.TMG.A_Virtual_IP_and_a_Dedicated_IP_do_not_have_the_same_subnet_mask_or_are_in_different_subnets.Rule | Microsoft.Forefront.TMG.NLB.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| A web filter failed to reload its configuration | This Rule generates alerts when A web filter failed to reload its configuration | Microsoft.Forefront.TMG.A_web_filter_failed_to_reload_its_configuration.Rule | Microsoft.Forefront.TMG.WebProxy.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| A web filter is not installed on this server | This Rule generates alerts when A web filter is not installed on this server | Microsoft.Forefront.TMG.A_web_filter_is_not_installed_on_this_server.Rule | Microsoft.Forefront.TMG.WebProxy.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| A Web publishing rule failed because the Web listener selected for the rule is not valid | This Rule generates alerts when A Web publishing rule failed because the Web listener selected for the rule is not valid | Microsoft.Forefront.TMG.A_Web_publishing_rule_failed_because_the_Web_listener_selected_for_the_rule_is_not_valid.Rule | Microsoft.Forefront.TMG.Publishing.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| A Web publishing rule stopped forwarding requests to published servers in a Web farm because there are currently no online servers that can accept requests | This Rule generates alerts when A Web publishing rule stopped forwarding requests to published servers in a Web farm because there are currently no online servers that can accept requests | Microsoft.Forefront.TMG.A_Web_publishing_rule_stopped_forwarding_requests_to_published_servers_in_a_Web_farm_because_there_are_currently_no_online_servers_that_can_accept_requests.Rule | Microsoft.Forefront.TMG.Publishing.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| A web server name indicated by a web publishing rule couldnt be resolved | This Rule generates alerts when A web server name indicated by a web publishing rule couldnt be resolved | Microsoft.Forefront.TMG.A_web_server_name_indicated_by_a_web_publishing_rule_couldnt_be_resolved.Rule | Microsoft.Forefront.TMG.NLB.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| A Web server published by a rule rejected a request because TMG Server does not delegate the credentials required by the Web server for authentication | This Rule generates alerts when A Web server published by a rule rejected a request because TMG Server does not delegate the credentials required by the Web server for authentication | Microsoft.Forefront.TMG.A_Web_server_published_by_a_rule_rejected_a_request_because_ISA_Server_does_not_delegate_the_credentials_required_by_the_Web_server_for_authentication.Rule | Microsoft.Forefront.TMG.Publishing.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Cache - Disk Failure Rate (fail/sec) | | Microsoft.Forefront.TMG.Cache.ServerComponent.CacheDiskFailureRate.Rule | Microsoft.Forefront.TMG.Cache.ServerComponent | PerformanceCollection | True | Forefront TMG Cache | Disk Failure Rate (failures/sec) | 900 | 0 | | False | | | False | |
| Cache Hit Ratio for Last 10K Requests | | Microsoft.Forefront.TMG.Cache.ServerComponent.CacheHitRatioforLast10KRequests.Rule | Microsoft.Forefront.TMG.Cache.ServerComponent | PerformanceCollection | True | Forefront TMG Web Proxy | Cache Hit Ratio for Last 10K Requests (\%) | 900 | 0 | | False | | | False | |
| Changes made to the VPN configuration require the computer to be restarted | This Rule generates alerts when Changes made to the VPN configuration require the computer to be restarted | Microsoft.Forefront.TMG.Changes_made_to_the_VPN_configuration_require_the_computer_to_be_restarted.Rule | Microsoft.Forefront.TMG.VPN.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Changes to the network will take effect only after restarting the computer | This Rule generates alerts when Changes to the network will take effect only after restarting the computer | Microsoft.Forefront.TMG.Changes_to_the_network_will_take_effect_only_after_restarting_the_computer.Rule | Microsoft.Forefront.TMG.VPN.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Continuous changes to the configuration were detected | This Rule generates alerts when an continuous changes to the configuration were detected. | Microsoft.Forefront.TMG.Configuration.Changed_continuously.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Configuration changes made may result in loss of connectivity to the TMG Configuration Storage Server and therefore couldn't be applied | This Rule generates alerts when configuration changes made may result in loss of connectivity to the TMG Configuration Storage Server and therefore couldn't be applied. | Microsoft.Forefront.TMG.Configuration.Changes_made_may_result_in_loss_of_connectivity_to_the_ISA_CSS_and_therefore_couldnt_be_applied.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Unable to update local registry with changes made to the Central Storage | This Rule generates alerts when an Forefront TMG Server CSS was unable to update local registry with changes made to the Central Storage. | Microsoft.Forefront.TMG.ConfigurationAgent.Unable_to_update_the_local_registry_with_changes_made_to_the_central_storage.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The TMG Server configuration agent was unable to upload the configuration to the TMG Server services | This Rule generates alerts when the TMG Server configuration agent was unable to upload the configuration to the TMG Server services. | Microsoft.Forefront.TMG.ConfigurationAgent.Unable_to_upload_the_configuration_to_the_ISA_Server_services.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Definitions for malware inspection could not be loaded during update | This Rule generates alerts when Definitions for malware inspection could not be loaded during update. | Microsoft.Forefront.TMG.Definitions_for_malware_inspection_could_not_be_loaded_during_update.Rule | Microsoft.Forefront.TMG.WebProxy.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Definitions for malware inspection could not be loaded when the Microsoft Firewall Service attempted to start | This Rule generates alerts when Definitions for malware inspection could not be loaded when the Microsoft Firewall Service attempted to start. | Microsoft.Forefront.TMG.Definitions_for_malware_inspection_could_not_be_loaded_when_the_Microsoft_Firewall_Service_attempted_to_start.Rule | Microsoft.Forefront.TMG.WebProxy.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| DHCP cannot be used on multi-server arrays to assign IP addresses to VPN clients or remote endpoint servers | This Rule generates alerts when DHCP cannot be used on multi-server arrays to assign IP addresses to VPN clients or remote endpoint servers | Microsoft.Forefront.TMG.DHCP_cannot_be_used_on_multi_server_arrays_to_assign_IP_addresses_to_VPN_clients_or_remote_endpoint_servers.Rule | Microsoft.Forefront.TMG.VPN.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| An enterprise network overlaps with another enterperise network | This Rule generates alerts when an enterprise network overlaps with another enterperise network. | Microsoft.Forefront.TMG.EnterpriseNetwork.Overlaps_with_another_enterperise_network.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Failed to connect to a COM server class on the local computer | This Rule generates alerts when Failed to connect to a COM server class on the local computer | Microsoft.Forefront.TMG.Failed_to_connect_to_a_COM_server_class_on_the_local_computer.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| TMG Server failed to connect to the Configuration Storage server | This Rule generates alerts when TMG Server failed to connect to the Configuration Storage server | Microsoft.Forefront.TMG.Failed_to_connect_to_the_CSS.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Failed to enable the Routing and Remote Access service | This Rule generates alerts when Failed to enable the Routing and Remote Access service | Microsoft.Forefront.TMG.Failed_to_enable_the_Routing_and_Remote_Access_service.Rule | Microsoft.Forefront.TMG.VPN.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Failed to read the Routing and Remote Access service configuration from the registry | This Rule generates alerts when Failed to read the Routing and Remote Access service configuration from the registry | Microsoft.Forefront.TMG.Failed_to_read_the_Routing_and_Remote_Access_service_configuration_from_the_registry.Rule | Microsoft.Forefront.TMG.VPN.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Failed to reduce the size of cache file | This Rule generates alerts when Failed to reduce the size of cache file | Microsoft.Forefront.TMG.Failed_to_reduce_the_size_of_cache_file.Rule | Microsoft.Forefront.TMG.Cache.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Failed to resolve a remote gateway address specified for VPN site-to-site network | This Rule generates alerts when Failed to resolve a remote gateway address specified for VPN site-to-site network | Microsoft.Forefront.TMG.Failed_to_resolve_a_remote_gateway_address_specified_for_VPN_site_to_site_network.Rule | Microsoft.Forefront.TMG.VPN.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Failed to save the Routing and Remote Access service configuration in the registry | This Rule generates alerts when Failed to save the Routing and Remote Access service configuration in the registry | Microsoft.Forefront.TMG.Failed_to_save_the_Routing_and_Remote_Access_service_configuration_in_the_registry.Rule | Microsoft.Forefront.TMG.VPN.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Failed to save VPN configuration, the IPsec pre-shared key for this server may be unavailable | This Rule generates alerts when Failed to save VPN configuration, the IPsec pre-shared key for this server may be unavailable | Microsoft.Forefront.TMG.Failed_to_save_VPN_configuration_the_IPsec_pre_shared_key_for_this_server_may_be_unavailable.Rule | Microsoft.Forefront.TMG.VPN.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Failed to start the Routing and Remote Access service | This Rule generates alerts when Failed to start the Routing and Remote Access service | Microsoft.Forefront.TMG.Failed_to_start_the_Routing_and_Remote_Access_service.Rule | Microsoft.Forefront.TMG.VPN.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Failed to stop the Routing and Remote Access service | This Rule generates alerts when Failed to stop the Routing and Remote Access service | Microsoft.Forefront.TMG.Failed_to_stop_the_Routing_and_Remote_Access_service.Rule | Microsoft.Forefront.TMG.VPN.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Failed to stop the service | This Rule generates alerts when Failed to stop the service | Microsoft.Forefront.TMG.Failed_to_stop_the_service.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Failed to write the last daily summary date to the registry | This Rule generates alerts when Failed to write the last daily summary date to the registry | Microsoft.Forefront.TMG.Failed_to_write_the_last_daily_summary_date_to_the_registry.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Failed to write the last monthly summary date to the registry | This Rule generates alerts when Failed to write the last monthly summary date to the registry | Microsoft.Forefront.TMG.Failed_to_write_the_last_monthly_summary_date_to_the_registry.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The Microsoft Firewall service encountered a failure | This Rule generates alerts when The Microsoft Firewall service encountered a failure | Microsoft.Forefront.TMG.FirewallService.Encountered_failure.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The Microsoft Firewall service failed to start | This Rule generates alerts when The Microsoft Firewall service failed to start | Microsoft.Forefront.TMG.FirewallService.Failed_to_start.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Forefront TMG cannot route network traffic through a specific ISP link | Forefront TMG cannot route network traffic through a specific ISP link. | Microsoft.Forefront.TMG.Forefront_TMG_cannot_route_network_traffic_through_a_specific_ISP_link.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Forefront TMG cannot route network traffic through a specific ISP link due to configuration problems | This Rule generates alerts when Forefront TMG cannot route network traffic through a specific ISP link due to configuration problems. | Microsoft.Forefront.TMG.Forefront_TMG_cannot_route_network_traffic_through_a_specific_ISP_link_due_to_configuration_problems.Rule | Microsoft.Forefront.TMG.WebProxy.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Forefront TMG cannot route network traffic to the internet | This Rule generates alerts when Forefront TMG cannot route network traffic to the internet | Microsoft.Forefront.TMG.Forefront_TMG_cannot_route_network_traffic_to_the_internet.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Forefront TMG entered a state in which all traffic is blocked | This Rule generates alerts when Forefront TMG entered a state in which all traffic is blocked. | Microsoft.Forefront.TMG.Forefront_TMG_entered_a_state_in_which_all_traffic_is_blocked.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The HTTPS inspection configuration settings could not be loaded | This Rule generates alerts when the HTTPS inspection configuration settings could not be loaded. | Microsoft.Forefront.TMG.Forefront_TMG_failed_to_load_HTTPS_inspection_configuration_settings.Rule | Microsoft.Forefront.TMG.WebProxy.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Forefront TMG failed to reload the newly downloaded URL filtering database from the folder \%1 | This Rule generates alerts when Forefront TMG failed to reload the newly downloaded URL filtering database from the folder \%1. | Microsoft.Forefront.TMG.Forefront_TMG_failed_to_reload_the_newly_downloaded_URL_filtering_database.Rule | Microsoft.Forefront.TMG.WebProxy.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Forefront TMG is no longer configured to use Microsoft Update | This Rule generates alerts when Forefront TMG is no longer configured to use Microsoft Update. | Microsoft.Forefront.TMG.Forefront_TMG_is_no_longer_configured_to_use_Microsoft_Update.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Updating of the computer name or FQDN failed | This Rule generates alerts when Updating of the computer name or FQDN failed | Microsoft.Forefront.TMG.FQDN.UpdateFailed.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The FTP filter failed to parse the allowed FTP commands | This Rule generates alerts when The FTP filter failed to parse the allowed FTP commands | Microsoft.Forefront.TMG.FTPFilter.Failed_to_parse_the_allowed_FTP_commands.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| H323 filter failed to bind IP address for listening | This Rule generates alerts when H323 filter failed to bind IP address for listening | Microsoft.Forefront.TMG.H323_filter_failed_to_bind_IP_address_for_listening.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| H323 filter invalid port configured for listening | This Rule generates alerts when H323 filter invalid port configured for listening | Microsoft.Forefront.TMG.H323_filter_invalid_port_configured_for_listening.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| HTTPS Inspection - Connections Inspected | | Microsoft.Forefront.TMG.HTTPSInspection.ServerComponent.HTTPSConnectionsInspected.Rule | Microsoft.Forefront.TMG.HTTPSInspection.ServerComponent | PerformanceCollection | True | Forefront TMG Web Proxy | HTTPS connections inspected | 900 | 0 | | False | | | False | |
| HTTPS Inspection - Failures / Sec | | Microsoft.Forefront.TMG.HTTPSInspection.ServerComponent.HTTPSInspectionFailuresPerSec.Rule | Microsoft.Forefront.TMG.HTTPSInspection.ServerComponent | PerformanceCollection | True | Forefront TMG Web Proxy | HTTPS inspection failures/sec | 900 | 0 | | False | | | False | |
| Initialization of the H323 performance counters failed | This Rule generates alerts when Initialization of the H323 performance counters failed | Microsoft.Forefront.TMG.Initialization_of_the_H323_performance_counters_failed.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Initializing the RAS client module failed | This Rule generates alerts when Initializing the RAS client module failed | Microsoft.Forefront.TMG.Initializing_the_RAS_client_module_failed.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Intra array account must be defined and enabled when working when the array members are in a workgroup | This Rule generates alerts when Intra array account must be defined and enabled when working when the array members are in a workgroup | Microsoft.Forefront.TMG.Intra_array_account_must_be_defined_and_enabled_when_working_when_the_array_members_are_in_a_workgroup.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Invalid TMG Server log directory | This Rule generates alerts when Invalid TMG Server log directory | Microsoft.Forefront.TMG.Invalid_ISA_Server_log_directory.Rule | Microsoft.Forefront.TMG.Logging.TextFile | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Invalid parameters were specified for the ReportGen utility | This Rule generates alerts when Invalid parameters were specified for the ReportGen utility | Microsoft.Forefront.TMG.Invalid_parameters_were_specified_for_the_ReportGen_utility.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| IPSecPol could not be detected on the TMG Server computer | This Rule generates alerts when IPSecPol could not be detected on the TMG Server computer | Microsoft.Forefront.TMG.IPSecPol_could_not_be_detected_on_the_ISA_Server_computer.Rule | Microsoft.Forefront.TMG.VPN.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| TMG failed to load the firewall policy configuration | This Rule generates alerts when TMG failed to load the firewall policy configuration | Microsoft.Forefront.TMG.ISA_failed_to_load_the_firewall_policy_configuration.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| TMG Server cannot connect to a proxy server | This Rule generates alerts when TMG Server cannot connect to a proxy server | Microsoft.Forefront.TMG.ISA_Server_cannot_connect_to_a_proxy_server.Rule | Microsoft.Forefront.TMG.WebProxy.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| TMG Server cannot locate a route to a remote site | This Rule generates alerts when TMG Server cannot locate a route to a remote site | Microsoft.Forefront.TMG.ISA_Server_cannot_locate_a_route_to_a_remote_site.Rule | Microsoft.Forefront.TMG.VPN.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| TMG Server could not delegate credentials using Kerberos constrained delegation | This Rule generates alerts when TMG Server could not delegate credentials using Kerberos constrained delegation | Microsoft.Forefront.TMG.ISA_Server_could_not_delegate_credentials_using_Kerberos_constrained_delegation.Rule | Microsoft.Forefront.TMG.Publishing.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| TMG Server could not query the status of the Remote Access Service | This Rule generates alerts when TMG Server could not query the status of the Remote Access Service | Microsoft.Forefront.TMG.ISA_Server_could_not_query_the_status_of_the_Remote_Access_Service.Rule | Microsoft.Forefront.TMG.VPN.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| TMG Server detected a network adapter connected to multiple networks | This Rule generates alerts when TMG Server detected a network adapter connected to multiple networks | Microsoft.Forefront.TMG.ISA_Server_detected_a_network_adapter_connected_to_multiple_networks.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| TMG Server detected a network element containing an invalid address range | This Rule generates alerts when TMG Server detected a network element containing an invalid address range | Microsoft.Forefront.TMG.ISA_Server_detected_a_network_element_containing_an_invalid_address_range.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| TMG Server detected a proxy server loop | This Rule generates alerts when TMG Server detected a proxy server loop | Microsoft.Forefront.TMG.ISA_Server_detected_a_proxy_server_loop.Rule | Microsoft.Forefront.TMG.WebProxy.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| TMG Server detected network elements that contain overlapping address ranges | This Rule generates alerts when TMG Server detected network elements that contain overlapping address ranges | Microsoft.Forefront.TMG.ISA_Server_detected_network_elements_that_contain_overlapping_address_ranges.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| TMG Server detected routes through a network adapter that do not correlate with the network to which this adapter belongs | This Rule generates alerts when TMG Server detected routes through a network adapter that do not correlate with the network to which this adapter belongs | Microsoft.Forefront.TMG.ISA_Server_detected_routes_through_a_network_adapter_that_do_not_correlate_with_the_network_to_which_this_adapter_belongs.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| TMG Server detected that an IP address was removed from a network | This Rule generates alerts when TMG Server detected that an IP address was removed from a network | Microsoft.Forefront.TMG.ISA_Server_detected_that_an_IP_address_was_removed_from_a_network.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| TMG Server failed to activate the Firewall Engine | This Rule generates alerts when TMG Server failed to activate the Firewall Engine | Microsoft.Forefront.TMG.ISA_Server_failed_to_activate_the_Firewall_Engine.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| TMG Server failed to disable the Remote Access service | This Rule generates alerts when TMG Server failed to disable the Remote Access service | Microsoft.Forefront.TMG.ISA_Server_failed_to_disable_the_Remote_Access_Service.Rule | Microsoft.Forefront.TMG.VPN.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| TMG Server failed to establish an SSL connection | This Rule generates alerts when TMG Server failed to establish an SSL connection | Microsoft.Forefront.TMG.ISA_Server_failed_to_establish_an_SSL_connection.Rule | Microsoft.Forefront.TMG.WebProxy.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| TMG Server failed to initialize due to a corrupted registry | This Rule generates alerts when TMG Server failed to initialize due to a corrupted registry | Microsoft.Forefront.TMG.ISA_Server_failed_to_initialize_due_to_a_corrupted_registry.Rule | Microsoft.Forefront.TMG.WebProxy.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| TMG Server failed to initialize server publishing because an internal error occurred | This Rule generates alerts when TMG Server failed to initialize server publishing because an internal error occurred | Microsoft.Forefront.TMG.ISA_Server_failed_to_initialize_server_publishing_because_an_internal_error_occurred.Rule | Microsoft.Forefront.TMG.Publishing.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| TMG Server failed to initialize the cache because the Network services account does not have sufficient permissions for the root folder and the Urlcache folder on a cache drive | This Rule generates alerts when TMG Server failed to initialize the cache because the Network services account does not have sufficient permissions for the root folder and the Urlcache folder on a cache drive | Microsoft.Forefront.TMG.ISA_Server_failed_to_initialize_the_cache_because_the_Network_Services_account_does_not_have_sufficient_permissions_for_the_root_folder_and_the_Urlcache_folder_on_a_cache_drive.Rule | Microsoft.Forefront.TMG.Cache.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| TMG Server failed to load a Web Filter DLL | This Rule generates alerts when TMG Server failed to load a Web Filter DLL | Microsoft.Forefront.TMG.ISA_Server_failed_to_load_a_Web_Filter_DLL.Rule | Microsoft.Forefront.TMG.WebProxy.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| TMG Server failed to read one or more server publishing rules from the stored configuration because an internal error occurred | This Rule generates alerts when TMG Server failed to read one or more server publishing rules from the stored configuration because an internal error occurred | Microsoft.Forefront.TMG.ISA_Server_failed_to_read_one_or_more_server_publishing_rules_from_the_stored_configuration_because_an_internal_error_occurred.Rule | Microsoft.Forefront.TMG.Publishing.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| TMG Server failed to read the parameters of a publishing rule from the stored configuration | This Rule generates alerts when TMG Server failed to read the parameters of a publishing rule from the stored configuration | Microsoft.Forefront.TMG.ISA_Server_failed_to_read_the_parameters_of_a_publishing_rule_from_the_stored_configuration.Rule | Microsoft.Forefront.TMG.Publishing.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| TMG Server failed to read the server publishing rules from the stored configuration because an internal error occurred | This Rule generates alerts when TMG Server failed to read the server publishing rules from the stored configuration because an internal error occurred | Microsoft.Forefront.TMG.ISA_Server_failed_to_read_the_server_publishing_rules_from_the_stored_configuration_because_an_internal_error_occurred.Rule | Microsoft.Forefront.TMG.Publishing.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| TMG Server failed to write content to the cache file | This Rule generates alerts when TMG Server failed to write content to the cache file | Microsoft.Forefront.TMG.ISA_Server_failed_to_write_content_to_the_cache_file.Rule | Microsoft.Forefront.TMG.Cache.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| TMG Server has detected RADIUS servers with identical names in the RADIUS Server List storage | This Rule generates alerts when TMG Server has detected RADIUS servers with identical names in the RADIUS Server List storage | Microsoft.Forefront.TMG.ISA_Server_has_detected_RADIUS_servers_with_identical_names_in_the_RADIUS_Server_List_storage.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| TMG Server report or summary generation error | This Rule generates alerts when TMG Server report or summary generation error | Microsoft.Forefront.TMG.ISA_Server_report_or_summary_generation_error.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| TMG Server will not be able save all the run-time configuration information of a cache disk when you shut down TMG Server | This Rule generates alerts when TMG Server will not be able save all the run-time configuration information of a cache disk when you shut down TMG Server | Microsoft.Forefront.TMG.ISA_Server_will_not_be_able_save_all_the_run_time_configuration_information_of_a_cache_disk_when_you_shut_down_ISA_Server.Rule | Microsoft.Forefront.TMG.Cache.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Listening for Q931 connections failed | This Rule generates alerts when Listening for Q931 connections failed | Microsoft.Forefront.TMG.Listening_for_Q931_connections_failed.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Low resources Memory allocation failed | This Rule generates alerts when Low resources Memory allocation failed | Microsoft.Forefront.TMG.Low_resources_Memory_allocation_failed.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Memory allocation failed | This Rule generates alerts when Memory allocation failed | Microsoft.Forefront.TMG.Memory_allocation_failed.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Microsoft Firewall Service could not create or access the accumulation folder | This Rule generates alerts when Microsoft Firewall Service could not create or access the accumulation folder. | Microsoft.Forefront.TMG.Microsoft_Firewall_Service_could_not_create_or_access_the_accumulation_folder.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Microsoft Firewall Service failed to create the configuration required for processing IPsec traffic | This Rule generates alerts when Microsoft Firewall Service failed to create the configuration required for processing IPsec traffic. | Microsoft.Forefront.TMG.Microsoft_Firewall_Service_failed_to_create_the_configuration_required_for_processing_IPsec_traffic.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| A missing enterprise policy preventing the TMG Server configuration agent from uploading the configuration to the TMG Server services | This Rule generates alerts when a missing enterprise policy preventing the TMG Server configuration agent from uploading the configuration to the TMG Server services | Microsoft.Forefront.TMG.Missing_enterprise_policy_preventing_ISA_Server_configuration_agent_from_uploading_configuration_to_ISA_Server_services.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Network Load Balancing cannot be configured properly because there is no suitable network adapter | This Rule generates alerts when Network Load Balancing cannot be configured properly because there is no suitable network adapter | Microsoft.Forefront.TMG.Network_Load_Balancing_cannot_be_configured_properly_because_there_is_no_suitable_network_adapter.Rule | Microsoft.Forefront.TMG.NLB.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| New definition updates are available, but were not installed | This Rule generates alerts when New definition updates are available, but were not installed. | Microsoft.Forefront.TMG.New_definition_updates_are_available_but_were_not_installed.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| No connection owner is specified for a VPN site-to-site network | This Rule generates alerts when No connection owner is specified for a VPN site-to-site network | Microsoft.Forefront.TMG.No_connection_owner_is_specified_for_a_VPN_site_to_site_network.Rule | Microsoft.Forefront.TMG.VPN.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| One or more licenses to subscription services are about to expire | This Rule generates alerts when One or more licenses to subscription services are about to expire. | Microsoft.Forefront.TMG.one_or_more_licenses_to_subscription_services_are_about_to_expire.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| One or more licenses to subscription services have expired | This Rule generates alerts when One or more licenses to subscription services have expired. | Microsoft.Forefront.TMG.one_or_more_licenses_to_subscription_services_have_expired.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| One or more of the actions associated with an alert has failed due to configuration settings | This Rule generates alerts when One or more of the actions associated with an alert has failed due to configuration settings | Microsoft.Forefront.TMG.One_or_more_of_the_actions_associated_with_an_alert_has_failed_due_to_configuration_settings.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| One or more previously unavailable array member is not handling VPN connections | This Rule generates alerts when One or more previously unavailable array member is not handling VPN connections | Microsoft.Forefront.TMG.One_or_more_previously_unavailable_array_member_is_not_handling_VPN_connections.Rule | Microsoft.Forefront.TMG.VPN.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Quarantine in the Remote Access Policy cannot be enabled | This Rule generates alerts when Quarantine in the Remote Access Policy cannot be enabled | Microsoft.Forefront.TMG.Quarantine_in_the_Remote_Access_Policy_cannot_be_enabled.Rule | Microsoft.Forefront.TMG.VPN.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| TMG Server has encountered an error while loading the RADIUS Server List | This Rule generates alerts when TMG Server has encountered an error while loading the RADIUS Server List | Microsoft.Forefront.TMG.RADIUSServerList.ErrorWhileLoading.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Registration with the H323 Gatekeeper failed | This Rule generates alerts when Registration with the H323 Gatekeeper failed | Microsoft.Forefront.TMG.Registration_with_the_H323_Gatekeeper_failed.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The registry hive could not be loaded | This Rule generates alerts when the registry hive could not be loaded | Microsoft.Forefront.TMG.RegistryHive.Could_not_be_loaded.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Routing configurations for some intra array servers are not defined properly | This Rule generates alerts when Routing configurations for some intra array servers are not defined properly | Microsoft.Forefront.TMG.Routing_configurations_for_some_intra_array_servers_are_not_defined_properly.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Firewall - Active Connections | | Microsoft.Forefront.TMG.Server.ActiveConnections.Rule | Microsoft.Forefront.TMG.Server | PerformanceCollection | True | Forefront TMG Firewall Packet Engine | Active Connections | 900 | 0 | | False | | | False | |
| Firewall - Available Worker Threads | | Microsoft.Forefront.TMG.Server.AvailableWorkerThreads.Rule | Microsoft.Forefront.TMG.Server | PerformanceCollection | True | Forefront TMG Firewall Service | Available Worker Threads | 900 | 0 | | False | | | False | |
| Server - Current Disk Queue Length | | Microsoft.Forefront.TMG.Server.CurrentDiskQueueLength.Rule | Microsoft.Forefront.TMG.Server | PerformanceCollection | True | PhysicalDisk | Current Disk Queue Length | 900 | 0 | | False | | | False | |
| Firewall - DNS Cache Hits | | Microsoft.Forefront.TMG.Server.DNSCacheHits.Rule | Microsoft.Forefront.TMG.Server | PerformanceCollection | True | Forefront TMG Firewall Service | DNS Cache Hits \% | 900 | 0 | | False | | | False | |
| Firewall - Backlogged Packets | | Microsoft.Forefront.TMG.Server.FirewallBackloggedPackets.Rule | Microsoft.Forefront.TMG.Server | PerformanceCollection | True | Forefront TMG Firewall Packet Engine | Backlogged Packets | 900 | 0 | | False | | | False | |
| Firewall - Dropped Packets/sec | | Microsoft.Forefront.TMG.Server.FirewallDroppedPacketsPerSec.Rule | Microsoft.Forefront.TMG.Server | PerformanceCollection | True | Forefront TMG Firewall Packet Engine | Dropped Packets/sec | 900 | 0 | | False | | | False | |
| Processor - \% Processor Time | | Microsoft.Forefront.TMG.Server.ProcessorTime.Rule | Microsoft.Forefront.TMG.Server | PerformanceCollection | True | Processor | \% Processor Time | 900 | 0 | | False | | | False | |
| Process - \% Processor Time for Firewall Service | | Microsoft.Forefront.TMG.Server.ProcessTimeFW.Rule | Microsoft.Forefront.TMG.Server | PerformanceCollection | True | Process | \% Processor Time | 900 | 0 | | False | | | False | |
| Process - Virtual Bytes for Firewall Service | | Microsoft.Forefront.TMG.Server.VirtualBytesFW.Rule | Microsoft.Forefront.TMG.Server | PerformanceCollection | True | Process | Virtual Bytes | 900 | 0 | | False | | | False | |
| The TMG Server Control service configuration agent was unable to revert to last known configuration | This Rule generates alerts when the TMG Server Control service configuration agent was unable to revert to last known configuration | Microsoft.Forefront.TMG.ServerControlService.ConfigAgent.Unable_to_revert_to_last_known_Configuration.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The Microsoft Forefront TMG Control service encountered a failure | This Rule generates alerts when The Microsoft Forefront TMG Control service encountered a failure | Microsoft.Forefront.TMG.ServerControlService.Encountered_failure.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| SOCKS filter failed to bind IP address for listening | This Rule generates alerts when SOCKS filter failed to bind IP address for listening | Microsoft.Forefront.TMG.SOCKS_filter_failed_to_bind_IP_address_for_listening.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| SOCKS filter invalid port configured for listening | This Rule generates alerts when SOCKS filter invalid port configured for listening | Microsoft.Forefront.TMG.SOCKS_filter_invalid_port_configured_for_listening.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Software Update Required | This Rule generates alerts when Software Update Required | Microsoft.Forefront.TMG.Software_Update_Required.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Some certificates cannot be initialized | This Rule generates alerts when Some certificates cannot be initialized | Microsoft.Forefront.TMG.Some_certificates_cannot_be_initialized.Rule | Microsoft.Forefront.TMG.WebProxy.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| There is inconsistency in some cache files | This Rule generates alerts when There is inconsistency in some cache files | Microsoft.Forefront.TMG.There_is_inconsistency_in_some_cache_files.Rule | Microsoft.Forefront.TMG.Cache.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The action to connect to the TMG Server report data collector failed | This Rule generates alerts when The action to connect to the TMG Server report data collector failed | Microsoft.Forefront.TMG.The_action_to_connect_to_the_ISA_Server_report_data_collector_failed.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The action to copy the period summary from an array member failed | This Rule generates alerts when The action to copy the period summary from an array member failed | Microsoft.Forefront.TMG.The_action_to_copy_the_period_summary_from_an_array_member_failed.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The action to retrieve the TMG Server log directory failed | This Rule generates alerts when The action to retrieve the TMG Server log directory failed | Microsoft.Forefront.TMG.The_action_to_retrieve_the_ISA_Server_log_directory_failed.Rule | Microsoft.Forefront.TMG.Logging.TextFile | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The action to summarize all period summaries from the array failed | This Rule generates alerts when The action to summarize all period summaries from the array failed | Microsoft.Forefront.TMG.The_action_to_summarize_all_period_summaries_from_the_array_failed.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The alert feature of the TMG Server Control service failed to logon to run a command | This Rule generates alerts when The alert feature of the TMG Server Control service failed to logon to run a command | Microsoft.Forefront.TMG.The_alert_feature_of_the_ISA_Server_Control_service_failed_to_logon_to_run_a_command.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The amount of disk space that the Malware Inspection Filter needs for the accumulation of content exceeded the available disk space | This Rule generates alerts when The amount of disk space that the Malware Inspection Filter needs for the accumulation of content exceeded the available disk space. | Microsoft.Forefront.TMG.The_amount_of_disk_space_that_the_Malware_Inspection_Filter_needs_for_the_accumulation_of_content_exceeded_the_available_disk_space.Rule | Microsoft.Forefront.TMG.WebProxy.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The cache was not properly initialized | This Rule generates alerts when The cache was not properly initialized | Microsoft.Forefront.TMG.The_cache_was_not_properly_initialized.Rule | Microsoft.Forefront.TMG.Cache.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The certification authority (CA) certificate that will be used to sign cloned SSL server certificates for destination servers was successfully imported | This Rule generates alerts when The certification authority (CA) certificate that will be used to sign cloned SSL server certificates for destination servers was successfully imported. | Microsoft.Forefront.TMG.The_certification_authority_CA_certificate_was_successfully_imported.Rule | Microsoft.Forefront.TMG.WebProxy.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The client certificate was revoked due to an invalid or missing Certificate Revocation List CRL | This Rule generates alerts when The client certificate was revoked due to an invalid or missing Certificate Revocation List CRL | Microsoft.Forefront.TMG.The_client_certificate_was_revoked_due_to_an_invalid_or_missing_Certificate_Revocation_List_CRL.Rule | Microsoft.Forefront.TMG.WebProxy.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The configuration required for correct processing of IPsec-secured traffic could not be applied | This Rule generates alerts when The configuration required for correct processing of IPsec-secured traffic could not be applied. | Microsoft.Forefront.TMG.The_configuration_required_for_correct_processing_of_IPsec_secured_traffic_could_not_be_applied.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The connection request policy for NPS may prevent new RADIUS clients from obtaining NPS (RADIUS) services | This Rule generates alerts when The connection request policy for NPS may prevent new RADIUS clients from obtaining NPS (RADIUS) services. | Microsoft.Forefront.TMG.The_connection_request_policy_for_NPS_may_prevent_new_RADIUS_clients_from_obtaining_NPS_RADIUS_services.Rule | Microsoft.Forefront.TMG.VPN.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The connection to an LDAP server was restored | This Rule generates alerts when The connection to an LDAP server was restored | Microsoft.Forefront.TMG.The_connection_to_an_LDAP_server_was_restored.Rule | Microsoft.Forefront.TMG.Publishing.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The connection to a RADIUS server was restored | This Rule generates alerts when The connection to a RADIUS server was restored | Microsoft.Forefront.TMG.The_connection_to_a_RADIUS_server_was_restored.Rule | Microsoft.Forefront.TMG.Publishing.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The connection with the Windows Management Instrumentation WMI is broken | This Rule generates alerts when The connection with the Windows Management Instrumentation WMI is broken | Microsoft.Forefront.TMG.The_connection_with_the_Windows_Management_Instrumentation_WMI_is_broken.Rule | Microsoft.Forefront.TMG.NLB.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The daily summaries could not be deleted | This Rule generates alerts when The daily summaries could not be deleted | Microsoft.Forefront.TMG.The_daily_summaries_could_not_be_deleted.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The daily summaries could not be rolled up into a monthly summary | This Rule generates alerts when The daily summaries could not be rolled up into a monthly summary | Microsoft.Forefront.TMG.The_daily_summaries_could_not_be_rolled_up_into_a_monthly_summary.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The daily summaries for a specific period could not be rolled up into a single summary | This Rule generates alerts when The daily summaries for a specific period could not be rolled up into a single summary | Microsoft.Forefront.TMG.The_daily_summaries_for_a_specific_period_could_not_be_rolled_up_into_a_single_summary.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The daily summary was not created | This Rule generates alerts when The daily summary was not created | Microsoft.Forefront.TMG.The_daily_summary_was_not_created.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The email signaling that a report was generated could not be sent | This Rule generates alerts when The email signaling that a report was generated could not be sent | Microsoft.Forefront.TMG.The_email_signaling_that_a_report_was_generated_could_not_be_sent.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The Firewall service cannot connect to another proxy server | This Rule generates alerts when The Firewall service cannot connect to another proxy server | Microsoft.Forefront.TMG.The_Firewall_service_cannot_connect_to_another_proxy_server.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The Firewall service cannot create the IPSec configuration for a network | This Rule generates alerts when The Firewall service cannot create the IPSec configuration for a network | Microsoft.Forefront.TMG.The_Firewall_service_cannot_create_the_IPSec_configuration_for_a_network.Rule | Microsoft.Forefront.TMG.VPN.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The Firewall service cannot initialize the firewall engine driver | This Rule generates alerts when The Firewall service cannot initialize the firewall engine driver | Microsoft.Forefront.TMG.The_Firewall_service_cannot_initialize_the_firewall_engine_driver.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The Firewall service cannot initialize WinSock | This Rule generates alerts when The Firewall service cannot initialize WinSock | Microsoft.Forefront.TMG.The_Firewall_service_cannot_initialize_WinSock.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The Firewall service cannot remove the IPSec configuration for a network | This Rule generates alerts when The Firewall service cannot remove the IPSec configuration for a network | Microsoft.Forefront.TMG.The_Firewall_service_cannot_remove_the_IPSec_configuration_for_a_network.Rule | Microsoft.Forefront.TMG.VPN.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The Firewall service detected a demand dial interface connection that was not created by TMG Server | This Rule generates alerts when The Firewall service detected a demand dial interface connection that was not created by TMG Server | Microsoft.Forefront.TMG.The_Firewall_service_detected_a_demand_dial_interface_connection_that_was_not_created_by_ISA_Server.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The Firewall service detected a possible configuration error in a demand dial interface | This Rule generates alerts when The Firewall service detected a possible configuration error in a demand dial interface | Microsoft.Forefront.TMG.The_Firewall_service_detected_a_possible_configuration_error_in_a_demand_dial_interface.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The Firewall service detected a possible dial up connection configuration error | This Rule generates alerts when The Firewall service detected a possible dial up connection configuration error | Microsoft.Forefront.TMG.The_Firewall_service_detected_a_possible_dial_up_connection_configuration_error.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The Firewall service detected that an upstream proxy server is not available | This Rule generates alerts when The Firewall service detected that an upstream proxy server is not available | Microsoft.Forefront.TMG.The_Firewall_service_detected_that_an_upstream_proxy_server_is_not_available.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The Firewall service encountered an illegal operation runtime error R6025 in a pure virtual function | This Rule generates alerts when The Firewall service encountered an illegal operation runtime error R6025 in a pure virtual function | Microsoft.Forefront.TMG.The_Firewall_service_encountered_an_illegal_operation_runtime_error_R6025_in_a_pure_virtual_function.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The Firewall service failed to apply the Network Load Balancing configuration on the local computer | This Rule generates alerts when The Firewall service failed to apply the Network Load Balancing configuration on the local computer | Microsoft.Forefront.TMG.The_Firewall_service_failed_to_apply_the_Network_Load_Balancing_configuration_on_the_local_computer.Rule | Microsoft.Forefront.TMG.NLB.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The Firewall service failed to load a security dynamic link library DLL | This Rule generates alerts when The Firewall service failed to load a security dynamic link library DLL | Microsoft.Forefront.TMG.The_Firewall_service_failed_to_load_a_security_dynamic_link_library_DLL.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The Firewall service failed to open a listener for Firewall clients | This Rule generates alerts when The Firewall service failed to open a listener for Firewall clients | Microsoft.Forefront.TMG.The_Firewall_service_failed_to_open_a_listener_for_Firewall_clients.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The Firewall service requires Windows Server 2000 Service Pack 4 or Windows Server 2003 | This Rule generates alerts when The Firewall service requires Windows Server 2000 Service Pack 4 or Windows Server 2003 | Microsoft.Forefront.TMG.The_Firewall_service_requires_Windows_Server_2000_Service_Pack_4_or_Windows_Server_2003.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The Firewall service stopped because an application filter module generated an exception code | This Rule generates alerts when The Firewall service stopped because an application filter module generated an exception code | Microsoft.Forefront.TMG.The_Firewall_service_stopped_because_an_application_filter_module_generated_an_exception_code.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The certification authority (CA) certificate that should be used to sign cloned SSL server certificates for destination servers has expired | This Rule generates alerts when The certification authority (CA) certificate that should be used to sign cloned SSL server certificates for destination servers has expired. | Microsoft.Forefront.TMG.The_imported_certification_authority_CA_certificate_has_expired.Rule | Microsoft.Forefront.TMG.WebProxy.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The imported certification authority (CA) certificate that should be used to sign cloned SSL server certificates for destination servers is not trusted by the local computer | This Rule generates alerts when The imported certification authority (CA) certificate that should be used to sign cloned SSL server certificates for destination servers is not trusted by the local computer. | Microsoft.Forefront.TMG.The_imported_certification_authority_CA_certificate_is_not_trusted_by_the_local_computer.Rule | Microsoft.Forefront.TMG.WebProxy.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The imported certification authority (CA) certificate that should be used to sign cloned SSL server certificates for destination servers is not yet valid | This Rule generates alerts when The imported certification authority (CA) certificate that should be used to sign cloned SSL server certificates for destination servers is not yet valid. | Microsoft.Forefront.TMG.The_imported_certification_authority_CA_certificate_is_not_yet_valid.Rule | Microsoft.Forefront.TMG.WebProxy.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The IntraArrayAddress defined on this server is not in the Local Address Table LAT | This Rule generates alerts when The IntraArrayAddress defined on this server is not in the Local Address Table LAT | Microsoft.Forefront.TMG.The_IntraArrayAddress_defined_on_this_server_is_not_in_the_Local_Address_Table_LAT.Rule | Microsoft.Forefront.TMG.WebProxy.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The IPsec tunnel is not functioning because the local endpoint was misconfigured | This Rule generates alerts when The IPsec tunnel is not functioning because the local endpoint was misconfigured | Microsoft.Forefront.TMG.The_IPsec_tunnel_is_not_functioning_because_the_local_endpoint_was_misconfigured.Rule | Microsoft.Forefront.TMG.VPN.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The TMG Control service requires Windows Server 2000 with Service Pack 4 or Windows Server 2003 | This Rule generates alerts when The TMG Control service requires Windows Server 2000 with Service Pack 4 or Windows Server 2003 | Microsoft.Forefront.TMG.The_ISA_Control_service_requires_Windows_Server_2000_with_Service_Pack_4_or_Windows_Server_2003.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The TMG Control service was stopped | This Rule generates alerts when The TMG Control service was stopped | Microsoft.Forefront.TMG.The_ISA_Control_service_was_stopped.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The TMG Firewall Service was stopped the evaluation period has expired | This Rule generates alerts when The TMG Firewall Service was stopped the evaluation period has expired | Microsoft.Forefront.TMG.The_ISA_Firewall_Service_was_stopped_the_evaluation_period_has_expired.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The TMG Scheduler service was unable to connect to the Web Proxy filter | This Rule generates alerts when The TMG Scheduler service was unable to connect to the Web Proxy filter | Microsoft.Forefront.TMG.The_ISA_Scheduler_service_was_unable_to_connect_to_the_Web_Proxy_filter.Rule | Microsoft.Forefront.TMG.VPN.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The TMG Server Standard Edition cannot run because either the server is using more than 4 processors or it is configured to use the Active Directory service | This Rule generates alerts when The TMG Server Standard Edition cannot run because either the server is using more than 4 processors or it is configured to use the Active Directory service | Microsoft.Forefront.TMG.The_ISA_Server_Standard_Edition_cannot_run_because_either_the_server_is_using_more_than_4_processors_or_it_is_configured_to_use_the_Active_Directory_service.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The TMG Server Web Filter failed to log information to the MSDE database | This Rule generates alerts when The TMG Server Web Filter failed to log information to the MSDE database | Microsoft.Forefront.TMG.The_ISA_Server_Web_Filter_failed_to_log_information_to_the_MSDE_Database.Rule | Microsoft.Forefront.TMG.Logging.SQLServerExpressDatabase | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The TMG Server Web Filter failed to log information to the SQL database | This Rule generates alerts when The TMG Server Web Filter failed to log information to the SQL database | Microsoft.Forefront.TMG.The_ISA_Server_Web_Filter_failed_to_log_information_to_the_SQL_Database.Rule | Microsoft.Forefront.TMG.Logging.SQLDatabase | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The TMG Server Web Filter was unable to connect to the MSDE database | This Rule generates alerts when The TMG Server Web Filter was unable to connect to the MSDE database | Microsoft.Forefront.TMG.The_ISA_Server_Web_Filter_was_unable_to_connect_to_the_MSDE_database.Rule | Microsoft.Forefront.TMG.Logging.SQLServerExpressDatabase | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The TMG Server Web Filter was unable to connect to the SQL database | This Rule generates alerts when The TMG Server Web Filter was unable to connect to the SQL database | Microsoft.Forefront.TMG.The_ISA_Server_Web_Filter_was_unable_to_connect_to_the_SQL_database.Rule | Microsoft.Forefront.TMG.Logging.SQLDatabase | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The TMG Server Web Proxy failed to log information because the Web Proxy log does not exist | This Rule generates alerts when The TMG Server Web Proxy failed to log information because the Web Proxy log does not exist | Microsoft.Forefront.TMG.The_ISA_Server_Web_Proxy_failed_to_log_information_because_the_Web_Proxy_log_does_not_exist.Rule | Microsoft.Forefront.TMG.Logging.TextFile | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The TMG Server Web Proxy failed to log information to a text file | This Rule generates alerts when The TMG Server Web Proxy failed to log information to a text file | Microsoft.Forefront.TMG.The_ISA_Server_Web_Proxy_failed_to_log_information_to_a_text_file.Rule | Microsoft.Forefront.TMG.Logging.TextFile | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The TMG Server Web Proxy memory pool is low | This Rule generates alerts when The TMG Server Web Proxy memory pool is low | Microsoft.Forefront.TMG.The_ISA_Server_Web_Proxy_memory_pool_is_low.Rule | Microsoft.Forefront.TMG.WebProxy.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The TMG Server Web Proxy was unable to open an ADO connection | This Rule generates alerts when The TMG Server Web Proxy was unable to open an ADO connection | Microsoft.Forefront.TMG.The_ISA_Server_Web_Proxy_was_unable_to_open_an_ADO_connection.Rule | Microsoft.Forefront.TMG.Logging.SQLDatabase | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The log generation rate exceeds the log formatting rate | This Rule generates alerts when The log generation rate exceeds the log formatting rate | Microsoft.Forefront.TMG.The_log_generation_rate_exceeds_the_log_formatting_rate.Rule | Microsoft.Forefront.TMG.Logging.TextFile | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The Malware Inspection Filter failed to load a progress notification template file | This Rule generates alerts when The Malware Inspection Filter failed to load a progress notification template file. | Microsoft.Forefront.TMG.The_Malware_Inspection_Filter_failed_to_load_a_progress_notification_template_file.Rule | Microsoft.Forefront.TMG.WebProxy.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The maximum amount of disk space allowed for accumulation by the Malware Inspection Filter was exceeded | This Rule generates alerts when The maximum amount of disk space allowed for accumulation by the Malware Inspection Filter was exceeded. | Microsoft.Forefront.TMG.The_maximum_amount_of_disk_space_allowed_for_accumulation_by_the_Malware_Inspection_Filter_was_exceeded.Rule | Microsoft.Forefront.TMG.WebProxy.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The Microsoft Firewall failed to log information to the SQL database | This Rule generates alerts when The Microsoft Firewall failed to log information to the SQL database | Microsoft.Forefront.TMG.The_Microsoft_Firewall_failed_to_log_information_to_the_SQL_Database.Rule | Microsoft.Forefront.TMG.Logging.SQLDatabase | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The Microsoft Firewall service could not start because it failed to connect to The TMG Server Control service | This Rule generates alerts when The Microsoft Firewall service could not start because it failed to connect to The TMG Server Control service | Microsoft.Forefront.TMG.The_Microsoft_Firewall_service_could_not_start_because_it_failed_to_connect_to_The_ISA_Server_Control_service.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The Microsoft Firewall service encountered a system call failure | This Rule generates alerts when The Microsoft Firewall service encountered a system call failure | Microsoft.Forefront.TMG.The_Microsoft_Firewall_service_encountered_a_system_call_failure.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The Microsoft Firewall Service failed to initialize | This Rule generates alerts when The Microsoft Firewall Service failed to initialize | Microsoft.Forefront.TMG.The_Microsoft_Firewall_Service_failed_to_initialize.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The Microsoft Firewall service failed to log information because the Firewall log does not exist | This Rule generates alerts when The Microsoft Firewall service failed to log information because the Firewall log does not exist | Microsoft.Forefront.TMG.The_Microsoft_Firewall_service_failed_to_log_information_because_the_Firewall_log_does_not_exist.Rule | Microsoft.Forefront.TMG.Logging.TextFile | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The Microsoft Firewall service failed to log information to a text file | This Rule generates alerts when The Microsoft Firewall service failed to log information to a text file | Microsoft.Forefront.TMG.The_Microsoft_Firewall_service_failed_to_log_information_to_a_text_file.Rule | Microsoft.Forefront.TMG.Logging.TextFile | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The Microsoft Firewall service failed to log information to the MSDE database | This Rule generates alerts when The Microsoft Firewall service failed to log information to the MSDE database | Microsoft.Forefront.TMG.The_Microsoft_Firewall_Service_failed_to_log_information_to_the_MSDE_Database.Rule | Microsoft.Forefront.TMG.Logging.SQLServerExpressDatabase | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The Microsoft Firewall service failed to start | This Rule generates alerts when The Microsoft Firewall service failed to start | Microsoft.Forefront.TMG.The_Microsoft_Firewall_service_failed_to_start.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The Microsoft Firewall service was unable to connect to the MSDE database | This Rule generates alerts when The Microsoft Firewall service was unable to connect to the MSDE database | Microsoft.Forefront.TMG.The_Microsoft_Firewall_service_was_unable_to_connect_to_the_MSDE_database.Rule | Microsoft.Forefront.TMG.Logging.SQLServerExpressDatabase | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The Microsoft Firewall service was unable to open an ADO connection | This Rule generates alerts when The Microsoft Firewall service was unable to open an ADO connection | Microsoft.Forefront.TMG.The_Microsoft_Firewall_service_was_unable_to_open_an_ADO_connection.Rule | Microsoft.Forefront.TMG.Logging.SQLDatabase | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The Microsoft Firewall service was unable to connect to the SQL database | This Rule generates alerts when The Microsoft Firewall service was unable to connect to the SQL database | Microsoft.Forefront.TMG.The_Microsoft_Firewall_was_unable_to_connect_to_the_SQL_database.Rule | Microsoft.Forefront.TMG.Logging.SQLDatabase | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The Microsoft Forefront TMG Control service encountered a system call failure | This Rule generates alerts when The Microsoft Forefront TMG Control service encountered a system call failure | Microsoft.Forefront.TMG.The_Microsoft_ISA_Server_Control_service_encountered_a_system_call_failure.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The Microsoft Forefront TMG Control service failed to start | This Rule generates alerts when The Microsoft Forefront TMG Control service failed to start | Microsoft.Forefront.TMG.The_Microsoft_ISA_Server_Control_service_failed_to_start.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The Microsoft TMG Job Scheduler service could not start because it failed to connect to The TMG Server Control service | This Rule generates alerts when The Microsoft TMG Job Scheduler service could not start because it failed to connect to The TMG Server Control service | Microsoft.Forefront.TMG.The_Microsoft_ISA_Server_Job_Scheduler_service_could_not_start_because_it_failed_to_connect_to_The_ISA_Server_Control_service.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The monthly summaries could not be deleted | This Rule generates alerts when The monthly summaries could not be deleted | Microsoft.Forefront.TMG.The_monthly_summaries_could_not_be_deleted.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The name of a published Web server could not be resolved | This Rule generates alerts when The name of a published Web server could not be resolved | Microsoft.Forefront.TMG.The_name_of_a_published_Web_server_could_not_be_resolved.Rule | Microsoft.Forefront.TMG.Publishing.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The name of a RADIUS server cannot be resolved | This Rule generates alerts when The name of a RADIUS server cannot be resolved | Microsoft.Forefront.TMG.The_name_of_a_RADIUS_server_cannot_be_resolved.Rule | Microsoft.Forefront.TMG.Publishing.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The network adapter has an illegal IP address configuration | This Rule generates alerts when The network adapter has an illegal IP address configuration | Microsoft.Forefront.TMG.The_network_adapter_has_an_illegal_IP_address_configuration.Rule | Microsoft.Forefront.TMG.NLB.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The non TCP connection limit for a specific IP address was exceeded | This Rule generates alerts when The non TCP connection limit for a specific IP address was exceeded | Microsoft.Forefront.TMG.The_non_TCP_connection_limit_for_a_specific_IP_address_was_exceeded.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The number of denied connections from a specific source IP address exceeded the configured limit | This Rule generates alerts when The number of denied connections from a specific source IP address exceeded the configured limit | Microsoft.Forefront.TMG.The_number_of_denied_connections_from_a_specific_source_IP_address_exceeded_the_configured_limit.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The number of denied TCP and non TCP packets per second exceeded the system limit | This Rule generates alerts when The number of denied TCP and non TCP packets per second exceeded the system limit | Microsoft.Forefront.TMG.The_number_of_denied_TCP_and_non_TCP_packets_per_second_exceeded_the_system_limit.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The number of HTTP requests per minute from a specific source IP address exceeded the configured limit | This Rule generates alerts when The number of HTTP requests per minute from a specific source IP address exceeded the configured limit | Microsoft.Forefront.TMG.The_number_of_HTTP_requests_per_minute_from_a_specific_source_IP_address_exceeded_the_configured_limit.Rule | Microsoft.Forefront.TMG.WebProxy.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The number of pending DNS name resolution requests exceeds the system defined maximum | This Rule generates alerts when The number of pending DNS name resolution requests exceeds the system defined maximum | Microsoft.Forefront.TMG.The_number_of_pending_DNS_name_resolution_requests_exceeds_the_system_defined_maximum.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The number of TCP connections allowed from a specific source IP address exceeded the configured limit | This Rule generates alerts when The number of TCP connections allowed from a specific source IP address exceeded the configured limit | Microsoft.Forefront.TMG.The_number_of_TCP_connections_allowed_from_a_specific_source_IP_address_exceeded_the_configured_limit.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The number of TCP connections per minute from a specific source IP address exceeded the configured limit | This Rule generates alerts when The number of TCP connections per minute from a specific source IP address exceeded the configured limit | Microsoft.Forefront.TMG.The_number_of_TCP_connections_per_minute_from_a_specific_source_IP_address_exceeded_the_configured_limit.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The percentage of threads used for pending DNS requests out of the total number of available threads is below the system defined maximum | This Rule generates alerts when The percentage of threads used for pending DNS requests out of the total number of available threads is below the system defined maximum | Microsoft.Forefront.TMG.The_percentage_of_threads_used_for_pending_DNS_requests_out_of_the_total_number_of_available_threads_is_below_the_system_defined_maximum.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The RADIUS Server List is empty | This Rule generates alerts when The RADIUS Server List is empty | Microsoft.Forefront.TMG.The_RADIUS_Server_List_is_empty.Rule | Microsoft.Forefront.TMG.VPN.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The reference to the protocol from a server publishing rule could not be read | This Rule generates alerts when The reference to the protocol from a server publishing rule could not be read | Microsoft.Forefront.TMG.The_reference_to_the_protocol_from_a_server_publishing_rule_could_not_be_read.Rule | Microsoft.Forefront.TMG.Publishing.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The Remote Access Service configuration for VPN could not be completed | This Rule generates alerts when The Remote Access Service configuration for VPN could not be completed | Microsoft.Forefront.TMG.The_Remote_Access_Service_configuration_for_VPN_could_not_be_completed.Rule | Microsoft.Forefront.TMG.VPN.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The routing table for a network adapter includes IP address ranges that are not included in the array level network to which it is bound | This Rule generates alerts when The routing table for a network adapter includes IP address ranges that are not included in the array level network to which it is bound | Microsoft.Forefront.TMG.The_routing_table_for_a_network_adaptor_includes_IP_address_ranges_that_are_not_included_in_the_array_level_network_to_which_it_is_bound.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The RPC filter cannot use the defined port | This Rule generates alerts when The RPC filter cannot use the defined port | Microsoft.Forefront.TMG.The_RPC_filter_cannot_use_the_defined_port.Rule | Microsoft.Forefront.TMG.Publishing.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The RPC filter failed to start listening on some of the publishing rules | This Rule generates alerts when The RPC filter failed to start listening on some of the publishing rules | Microsoft.Forefront.TMG.The_RPC_filter_failed_to_start_listening_on_some_of_the_publishing_rules.Rule | Microsoft.Forefront.TMG.Publishing.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The service could not start because it failed to load RADIUS related configuration | This Rule generates alerts when The service could not start because it failed to load RADIUS related configuration | Microsoft.Forefront.TMG.The_service_could_not_start_because_it_failed_to_load_RADIUS_related_configuration.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The size of the free non paged pool fell below the system defined minimum | This Rule generates alerts when The size of the free non paged pool fell below the system defined minimum | Microsoft.Forefront.TMG.The_size_of_the_free_non_paged_pool_fell_below_the_system_defined_minimum.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The size of the free non paged pool is above the system defined minimum | This Rule generates alerts when The size of the free non paged pool is above the system defined minimum | Microsoft.Forefront.TMG.The_size_of_the_free_non_paged_pool_is_above_the_system_defined_minimum.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The SSL server certificate used by a published server expired or is not yet valid | This Rule generates alerts when The SSL server certificate used by a published server expired or is not yet valid | Microsoft.Forefront.TMG.The_SSL_server_certificate_used_by_a_published_server_expired_or_is_not_yet_valid.Rule | Microsoft.Forefront.TMG.Publishing.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The Web Proxy filter could not initialize | This Rule generates alerts when The Web Proxy filter could not initialize | Microsoft.Forefront.TMG.The_Web_Proxy_filter_could_not_initialize.Rule | Microsoft.Forefront.TMG.WebProxy.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The Web Proxy filter failed to bind its socket to a port | This Rule generates alerts when The Web Proxy filter failed to bind its socket to a port | Microsoft.Forefront.TMG.The_Web_Proxy_filter_failed_to_bind_its_socket_to_a_port.Rule | Microsoft.Forefront.TMG.WebProxy.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The Web Proxy filter failed to connect to one of the array members | This Rule generates alerts when The Web Proxy filter failed to connect to one of the array members | Microsoft.Forefront.TMG.The_Web_Proxy_filter_failed_to_connect_to_one_of_the_array_members.Rule | Microsoft.Forefront.TMG.WebProxy.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The Web Proxy filter failed to create a network socket | This Rule generates alerts when The Web Proxy filter failed to create a network socket | Microsoft.Forefront.TMG.The_Web_Proxy_filter_failed_to_create_a_network_socket.Rule | Microsoft.Forefront.TMG.WebProxy.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The Web Proxy filter is not listening on the defined intraarray address on a specified port | This Rule generates alerts when The Web Proxy filter is not listening on the defined intraarray address on a specified port | Microsoft.Forefront.TMG.The_Web_Proxy_filter_is_not_listening_on_the_defined_intraarray_address_on_a_specified_port.Rule | Microsoft.Forefront.TMG.WebProxy.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| The Web site published by a rule rejected the type of credentials that TMG Server tried to delegate | This Rule generates alerts when The Web site published by a rule rejected the type of credentials that TMG Server tried to delegate | Microsoft.Forefront.TMG.The_Web_site_published_by_a_rule_rejected_the_type_of_credentials_that_ISA_Server_tried_to_delegate.Rule | Microsoft.Forefront.TMG.Publishing.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| TMG server failed to initialize the log queue | This Rule generates alerts when TMG server failed to initialize the log queue | Microsoft.Forefront.TMG.TMG_server_failed_to_initialize_the_log_queue.Rule | Microsoft.Forefront.TMG.Logging.TextFile | EventCollection | True | | | 0 | 0 | | False | | | True | |
| TMG server failed to log network traffic | This Rule generates alerts when TMG server failed to log network traffic. | Microsoft.Forefront.TMG.TMG_server_failed_to_log_network_traffic.Rule | Microsoft.Forefront.TMG.Logging.TextFile | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Unexpected error the service has stopped responding to all requests | This Rule generates alerts when Unexpected error the service has stopped responding to all requests | Microsoft.Forefront.TMG.Unexpected_error_the_service_has_stopped_responding_to_all_requests.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Update Center Required Service Not Started | This Rule generates alerts when Update Center Required Service Not Started | Microsoft.Forefront.TMG.Update_Center_Required_Service_Not_Started.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Web Proxy - Active Web Sessions | | Microsoft.Forefront.TMG.WebProxy.ServerComponent.ActiveWebSessions.Rule | Microsoft.Forefront.TMG.WebProxy.ServerComponent | PerformanceCollection | True | Forefront TMG Web Proxy | Active Web Sessions | 900 | 0 | | False | | | False | |
| Web Proxy - Handle Count | | Microsoft.Forefront.TMG.WebProxy.ServerComponent.HandleCount.Rule | Microsoft.Forefront.TMG.WebProxy.ServerComponent | PerformanceCollection | True | Process | Handle count | 900 | 0 | | False | | | False | |
| Web Proxy - Requests/Sec | | Microsoft.Forefront.TMG.WebProxy.ServerComponent.RequestsPerSec.Rule | Microsoft.Forefront.TMG.WebProxy.ServerComponent | PerformanceCollection | True | Forefront TMG Web Proxy | Requests/sec | 900 | 0 | | False | | | False | |
| Web Proxy - Average Milliseconds/request | | Microsoft.Forefront.TMG.WebProxy.ServerComponent.WebProxyAverageMsPerRequest.Rule | Microsoft.Forefront.TMG.WebProxy.ServerComponent | PerformanceCollection | True | Forefront TMG Web Proxy | Average Milliseconds/request | 900 | 0 | | False | | | False | |
| Web Proxy - Current Cache Fetches Average Milliseconds/request | | Microsoft.Forefront.TMG.WebProxy.ServerComponent.WebProxyCacheFetchMsPerRequest.Rule | Microsoft.Forefront.TMG.WebProxy.ServerComponent | PerformanceCollection | True | Forefront TMG Web Proxy | Current Cache Fetches Average Milliseconds/request | 900 | 0 | | False | | | False | |
| Web Proxy - Current Direct Fetches Average Milliseconds/request | | Microsoft.Forefront.TMG.WebProxy.ServerComponent.WebProxyDirectFetchMsPerRequest.Rule | Microsoft.Forefront.TMG.WebProxy.ServerComponent | PerformanceCollection | True | Forefront TMG Web Proxy | Current Direct Fetches Average Milliseconds/request | 900 | 0 | | False | | | False | |
| Web filters cannot be initialized or updated changes cannot be applied To resolve this error check recent changes made to Web filters configuration | This Rule generates alerts when Web filters cannot be initialized or updated changes cannot be applied To resolve this error check recent changes made to Web filters configuration | Microsoft.Forefront.TMG.Web_filters_cannot_be_initialized_or_updated_changes_cannot_be_applied_To_resolve_this_error_check_recent_changes_made_to_Web_filters_configuration.Rule | Microsoft.Forefront.TMG.WebProxy.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Web Proxy filter failed to listen to a socket | This Rule generates alerts when Web Proxy filter failed to listen to a socket | Microsoft.Forefront.TMG.Web_Proxy_filter_failed_to_listen_to_a_socket.Rule | Microsoft.Forefront.TMG.WebProxy.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| While restoring cache data, objects with conflicting information were detected | This Rule generates alerts when While restoring cache data, objects with conflicting information were detected | Microsoft.Forefront.TMG.While_restoring_cache_data_objects_with_conflicting_information_were_detected.Rule | Microsoft.Forefront.TMG.Cache.ServerComponent | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Windows user based authentication is required for the applied policy | This Rule generates alerts when Windows user based authentication is required for the applied policy | Microsoft.Forefront.TMG.Windows_user_based_authentication_is_required_for_the_applied_policy.Rule | Microsoft.Forefront.TMG.Server | EventCollection | True | | | 0 | 0 | | False | | | True | |