Microsoft KB Archive/313964

= Firewall service does not start when you are using the Internet Connection Wizard =

Article ID: 313964

Article Last Modified on 10/31/2006

-

APPLIES TO


 * Microsoft Internet Security and Acceleration Server 2000 Standard Edition

-



This article was previously published under Q313964





SYMPTOMS
On a computer that is running Microsoft Windows Server 2003 or Microsoft Windows Server 2003 Enterprise, the ISA Server Firewall service may not start if you enable the Internet Connection Firewall, and the following error message may be logged in the System event:

Microsoft Firewall failed. The failure occurred during Initialization of Network Address Translation (NAT) because the system call InitNAT failed.

Use the source location 308.1113.3.0.1200.123 to report the failure. The error code in the Data area of the event properties indicates the cause of the failure. For more information about this event, see ISA Server Help. The error description is: Access is denied.



RESOLUTION
To resolve this problem, obtain latest service pack for ISA Server 2000. For more information about the latest service pack, click the following article number to view the article in the Microsoft Knowledge Base:

313139 How to obtain the latest Internet Security and Acceleration Server 2000 service pack



STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the &quot;Applies to&quot; section.

This problem was corrected in ISA Server 2000 SP1.



MORE INFORMATION
After you apply the ISA Server service pack, an example of the logged event appears as:

Microsoft Firewall failed. The failure occurred during Initialization of Network Address Translation (NAT) because the system call PNATInit failed. Use the source location 308.1151.3.0.1200.153 to report the failure. The error code in the Data area of the event properties indicates the cause of the failure. This failure may be due to the Internet Connection Firewall (ICF) service being enabled. If it is enabled, please disable the service named &quot;Internet Connection Firewall (ICF) / Internet Connection Sharing (ICS)&quot; (SharedAccess). Then, restart the computer. For more information about this event, see ISA Server Help. The error description is: Access is denied.

Note that ICF and the ISA Server Firewall are still mutually exclusive services. That is, you can start only one of the services a one time. If you want to protect large networks and you have purchased ISA Server, you should be using the ISA Firewall service, because it provides greater functionality and reporting capabilities.

Keywords: kbbug kbenv kbnofix KB313964

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.