Symptoms

When the WP_TRAFFIC tracing feature is enabled on a Microsoft Forefront Threat Management Gateway (TMG) 2010 server, the Forefront TMG Firewall service might crash. In addition, you might receive the following events in the event log:Log Name: ApplicationSource:        Microsoft Forefront TMG FirewallDate:          <Date>Event ID:      14057Task Category: NoneLevel:         ErrorKeywords:      ClassicUser:          N/AComputer:     <FQDN>Description:The Firewall service stopped because an application filter module C:\Program Files\Microsoft Forefront Threat Management Gateway\w3filter.dll generated an exception code C0000005 in address 0000000071CC0B14 when function CompleteAsyncIO was called. To resolve this error, remove recently installed application filters and restart the service.Log Name: ApplicationSource:        Application ErrorDate:          <Date>Event ID:      1000Task Category: (100)Level:         ErrorKeywords:      ClassicUser:          N/AComputer:      <FQDN>Description:Faulting application name: wspsrv.exe, version: 7.0.9027.400, time stamp: 0x4c8cade1Faulting module name: w3filter.dll, version: 7.0.9027.400, time stamp: 0x4c8cae41Exception code: 0xc0000005Fault offset: 0x0000000000050b14Faulting process id: 0x1468Faulting application start time: 0x01cc59b49d593ba1Faulting application path: C:\Program Files\Microsoft Forefront Threat Management Gateway\wspsrv.exeFaulting module path: C:\Program Files\Microsoft Forefront Threat Management Gateway\w3filter.dllNote This issue does not occur if the WP_TRAFFIC tracing feature is disabled.

Cause

This issue occurs because Forefront TMG Server 2010 tries to get the peer name for the trace line when the peer name is not available.

Resolution

To resolve this issue, install the hotfix that is described in the following Microsoft Knowledge Base (KB) article:

2498770 Description of the TMG Server rollup package

Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

More Information

For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:

824684 Description of the standard terminology that is used to describe Microsoft software updates

Need more help?

Want more options?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.

Communities help you ask and answer questions, give feedback, and hear from experts with rich knowledge.