Article ID: 887222 - Last Review: February 14, 2007 - Revision: 1.5

The ISA Server RPC filter blocks RPC traffic after Windows Server 2003 Service Pack 1 is installed on a computer that is running ISA Server 2004 or ISA Server 2000

View products that this article applies to.

System TipThis article applies to a different operating system than the one you are using. Article content that may not be relevant to you is disabled.

SYMPTOMS

You install Microsoft Windows Server 2003 Service Pack 1 (SP1) on a computer that is running Microsoft Internet Security and Acceleration (ISA) Server 2004, Standard Edition or Microsoft Internet Security and Acceleration (ISA) Server 2000. After you install the service pack, the ISA Server remote procedure call (RPC) filter blocks RPC traffic between networks.

Notes

RPC traffic between all other servers is not affected.
This problem does not occur with ISA Server 2004, Enterprise Edition.

Back to the top

CAUSE

This problem occurs because the ISA Server RPC filter is not compatible with the changes in the RPC protocol that are introduced by Windows Server 2003 SP1.

When you enable the ISA Server RPC filter, the RPC filter enforces strict compliance with a subset of the RPC protocol that is used by Microsoft Exchange Server MAPI communications. For more information about changes in the RPC protocol that are introduced by Windows Server 2003 SP1, click the following article number to view the article in the Microsoft Knowledge Base:

899148 (http://support.microsoft.com/kb/899148/ ) Some firewalls may reject network traffic that originates from Windows Server 2003 Service Pack 1-based computers

Back to the top

RESOLUTION

ISA Server 2004, Standard Edition

Service pack information

To resolve this problem, install ISA Server 2004 Service Pack 1 (SP1). For more information about how to obtain the latest ISA Server 2004 service pack, click the following article number to view the article in the Microsoft Knowledge Base:

891024 (http://support.microsoft.com/kb/891024/ ) How to obtain the latest ISA Server 2004 service pack

Back to the top

ISA Server 2000

Update information

A supported update is now available from Microsoft, but it is only intended to correct the problem that is described in this article. Only apply it to systems that are experiencing this specific problem. This update may receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next Internet Security and Acceleration Server 2000 or 2004 service pack that contains this update.

Prerequisites

To install this update, you must have ISA Server 2000 Service Pack 2 installed.

Restart requirement

You do not have to restart the computer after you install this update.

The update installer will prompt you to restart ISA services. You must restart ISA services.

Microsoft recommends that you disconnect from your Internet service provider when you install this update.

Update replacement information

This update does not replace any other updates.

The following file is available for download from the Microsoft Download Center:

Collapse this imageExpand this image

Download the ISA 2000 RPC Update package now. (http://www.microsoft.com/downloads/details.aspx?FamilyID=678CDCB6-6F05-45C0-ACFA-D8E3774B8E9C)
For more information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 (http://support.microsoft.com/kb/119591/ ) How to obtain Microsoft support files from online services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

File information

The English version of this update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.

   Date         Time   Version       Size    File name
   -----------------------------------------------------
   12-Dec-2004  05:42  3.0.1200.410  61,944  Rpcfltr.dll

Back to the top

WORKAROUND

To work around this problem, disable the ISA Server RPC filter.

Note When you disable the ISA Server RPC filter, you also disable RPC protocol filtering of traffic that is processed by the ISA Server RPC publishing rules.

Back to the top

STATUS

Microsoft has confirmed that this is a problem in Microsoft Internet Security and Acceleration Server 2000 and in Microsoft Internet Security and Acceleration Server 2004, Standard Edition.

Back to the top