FIX: ISA Firewall Causes Handle Leak in LSASS

Internet Security and Acceleration (ISA) Server Firewall service may slow down or stop responding to client requests.

This behavior occurs under the following configuration:

• The internal clients are running the ISA Server Firewall client.
  
  -and-
• The ISA Server has access policies defined that require user authentication. This might be Protocol rules or Site and Content rules that apply to specific users or groups.

The ISA Server Firewall service causes a handle leak in the Local Security Authority (LSASS) process.

You can detect the leak by using the System Monitor (Perfmon) tool to analyze the Handle Counter for LSASS Process.

To resolve this problem, obtain the Update Rollup for ISA Server Services. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.