Web Proxy Service Stops Responding

View products that this article applies to.

This article was previously published under Q319374

Expand all | Collapse all

SYMPTOMS

When an Internet Security and Acceleration (ISA) Server-based computer that is Web publishing an SSL Web site receives an invalid SSL packet, the ISA Server Web Proxy service may crash, generate an access violation error message, and may stop providing services.

Back to the top

CAUSE

This problem may occur when all of the following conditions exist:

SSL packets are sent to an ISA Server-based computer that is Web publishing a Web site that is configured to use SSL bridging.
A Web Publishing rule exists and is turned on for the SSL Web site.
An Incoming Web Requests listener exists for the SSL Web site.
The Enable SSL listeners check box on the Incoming Web Requests tab is checked.
On the ISA Server-based computer, a server certificate is installed and turned on. The server certificate is turned on in the Incoming Web Requests listener properties by a check mark in the Use a server certificate to authenticate to web clients check box.

Back to the top

RESOLUTION

You must install ISA Server Service Pack 1 (SP1) before you apply the following hotfix.

For additional information about how to obtain the latest ISA Server service pack, click the article number below to view the article in the Microsoft Knowledge Base:

313139 (http://support.microsoft.com/kb/313139/EN-US/ ) How to Obtain the Latest Internet Security and Acceleration Server 2000 Service Pack

The following file is available for download from the Microsoft Download Center:

Download Isahf174.exe now (http://www.microsoft.com/downloads/details.aspx?FamilyID=235B14FB-CDB4-4FCE-BE10-E25F869DD40E&displaylang=en) .

Release Date: May 8, 2002

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 (http://support.microsoft.com/kb/119591/EN-US/ ) How to Obtain Microsoft Support Files from Online Services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file. To install the fix, run the self-extracting file. You do not need to restart the ISA Server computer. If the computer is part of an ISA Server array, you do not need to shut the whole array down; you can still install this fix on a one-by-one basis.

The English version of this fix should have the following file attributes or later:

   Date        Time   Version       Size     File name
   -----------------------------------------------------
   5-May-2002  11:30  3.0.1200.174  384,272  W3proxy.exe

This fix also applies to the French, German, Spanish, and Japanese versions of ISA Server.

Back to the top

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.

Back to the top

MORE INFORMATION

For additional information about another problem that this hotfix resolves, click the article number below to view the article in the Microsoft Knowledge Base:

321846 (http://support.microsoft.com/kb/321846/EN-US/ ) Incorrect Canonicalization in Rules Engine

SSL bridging refers to the ability of ISA Server to encrypt or decrypt client requests, and then pass on the request to a destination Web server. For example, in a Web Publishing scenario, ISA Server can process a client SSL request by terminating the SSL connection from a client and then re-opening a new connection (either HTTP or SSL) with a Web server.

Because no listeners are configured in Incoming Web Requests by default, there is no potential for the Web Proxy service to stop responding on a default installation of ISA Server.

Back to the top