Microsoft KB Archive/828044

= ISA Server Intermittently Stops Responding to Web Proxy Client Requests =

Article ID: 828044

Article Last Modified on 6/14/2007

-

APPLIES TO


 * Microsoft Internet Security and Acceleration Server 2000 Standard Edition

-





SYMPTOMS
Your Microsoft Internet Security and Acceleration (ISA) Server 2000 server may intermittently stop responding to Web Proxy client requests. When you troubleshoot this problem, you notice all the following symptoms:
 * The Lsass.exe process uses a very high percentage of memory and continues to increase memory usage.
 * If you stop the Microsoft Web Proxy service (W3Proxy.exe), the Lsass.exe process does not use additional memory, but it does not release the memory that it currently has allocated.
 * If you restart the server, the problem is resolved.



CAUSE
This problem may occur if you configure the Microsoft Web Proxy service to authenticate outgoing Web Proxy client requests. The Microsoft Web Proxy service does not correctly release security context handles when it authenticates these client requests. This causes the Lsass.exe process to use additional memory resources. After the Lsass.exe process has used a lot of memory, the Microsoft Web Proxy service can no longer authenticate these outgoing requests and, as a result, stops responding to client requests.



RESOLUTION
A supported hotfix is now available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing this specific problem. This hotfix might receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next service pack that contains this hotfix.

To resolve this problem, submit a request to Microsoft Online Customer Services to obtain the hotfix. To submit an online request to obtain the hotfix, visit the following Microsoft Web site:

http://go.microsoft.com/?linkid=6294451

Note If additional issues occur or any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. To create a separate service request, visit the following Microsoft Web site:

http://support.microsoft.com/contactus/?ws=support

The English version of this hotfix has the file attributes (or later) that are listed in the following table. The dates and times for these files are listed in coordinated universal time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.

Date        Time   Version       Size     File name --- 11-Sep-2003 23:37  3.0.1200.292  178,448  Mspadmin.exe 11-Sep-2003 23:37  3.0.1200.292  103,184  Msphlpr.dll 11-Sep-2003 23:37  3.0.1200.292  392,464  W3proxy.exe 11-Sep-2003 23:37  3.0.1200.292  299,280  Wspsrv.exe



STATUS
Microsoft has confirmed that this is a problem in Microsoft Internet Security and Acceleration Server 2000.

Keywords: kbhotfixserver kbqfe kbqfe kbisaserv2000presp2fix kbfix kbbug kbfirewall KB828044

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.