ISA Server events
The table below lists the events and, where relevant, additional keys that are defined by
Microsoft Internet Security and Acceleration (ISA) Server. When you create an alert, you
specify one of the following events that triggers the alert.
Alert action failure The action associated with this alert failed.
A component that was configured for the array is missing on this server. <%user
Asymmetric installation
friendly component identification%>
Cache container
The cache container initialization failed and the container was ignored.
initialization error
Cache container recovery
The recovery of a single container was completed.
complete
Cache file resize failure There was a failure to reduce the cache file size.
Cache initialization
The Web cache proxy was disabled because of global failure.
failure
Cache recovery
The cache content recovery was completed.
completed
Cache write error There was a failure to write cached content to the cache.
During cache recovery, an object with conflicting information was detected. The
Cached object ignored
object was ignored.
Client/server Communication between the Firewall client and the Firewall service of ISA
communication failure Server failed.
Component load failure There was a failure to load an extension component. <%module name%>
Configuration error The ISA Server configuration is invalid <%storage path%>.
Failed to create a dial-on-demand connection, because there is no answer or the
Dial on demand failure
line is busy.
A host name overflow, length overflow, zone high port, or zone transfer attack
DNS Intrusion
occurred.
Event logging failure There was a failure to log the event information to the system event log.
Failed to retrieve object The object <URL> could not be loaded. <error>
Intra-array credentials The intra-array credentials were incorrect.
Intrusion detected An external user attempted an intrusion attack.
Invalid dial-on-demand
Invalid dial-on-demand credentials were detected.
credentials
Invalid ODBC log
The specified user name or password for this ODBC database is invalid.
credentials
IP packet dropped An IP packet that is not allowed by the policy was dropped.
IP Protocol violation A packet with invalid IP options was detected and dropped.
IP Spoofing The IP packet source address is not valid.
Log failure <service name> log failed.
Network configuration
A network configuration change that affects ISA Server was detected.
changed
There is a conflict with one of the operating system components: network address
OS component conflict translation (NAT) editor, Internet Connection Sharing (ICS), or Routing and
Remote Access.
ISA Server dropped a User Datagram Protocol (UDP) packet because it exceeded
Oversize UDP packet
maximum size, as specified in the registry key.
POP Intrusion Detected a Post Office Protocol (POP) buffer overflow.
Report Summary Received an rrror while generating a report summary from log files.
Generation Failure
Resource allocation There was a resource allocation failure, for example, the system ran out of
failure memory.
RPC filter - server The connectivity to the publishing RPC service <server name> changed.
connectivity changed <additional key>
Server Publishing Failure The server publishing rule cannot be applied.
Service Initialization
There was a service initialization failure.
failure
Service not responding An ISA Server service terminated or stopped functioning unexpectedly.
Service shutdown A service stopped properly. <%service name%>
Service started A service started properly. <%service name%>
SMTP Filter Event A Simple Mail Transfer Protocol (SMTP) filter event occurred.
SOCKS configuration
The port specified in SOCKS properties is in use by another protocol.
failure
SOCKS request was
A SOCKS request was refused due to policy violation.
refused
The server is out of All members of the array must be in the same site, but this server is in a different
array's site site.
Unregistered event An unregistered event was raised. The event internal ID is %1
Upstream chaining
The upstream chaining credentials are incorrect.
credentials
The Web Proxy service of ISA Server failed to route the request to an upstream
Web Proxy routing failure
proxy server.
Web Proxy routing
Web Proxy resumed routing to an upstream proxy server.
recovery
WMT live stream The streaming application filter encountered an error during Windows Media
splitting failure Technology (WMT) live stream splitting.
