The Microsoft Firewall service on an ISA Server 2004 Standard Edition-based computer may stop responding to client computer requests, and Event ID: 7031 and Event ID: 14057 may be logged in Event Viewer

Consider the following scenario. You configure a Microsoft Internet Security and Acceleration (ISA) Server 2004 Standard Edition-based computer to use Remote Authentication Dial-In User Service (RADIUS) server authentication on access rules. In this scenario, the Microsoft Firewall service on the ISA Server 2004 Standard Edition-based computer may stop responding to client computer requests. Additionally, Event ID: 7031 and Event ID: 14057 may be logged in Event Viewer.

The following event may be logged in the System log:

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7031
Date: date
Time: time
User: N/A
Computer: server_name
Description: The Microsoft-Firewall service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 0 milliseconds: action.

For more information, see Help and Support Center at http://support.microsoft.com.

The following event may be logged in the Application log:

Event Type: Error
Event Source: Microsoft-Firewall
Event Category: None
Event ID: 14057
Date: date
Time: time
User: N/A
Computer: server_name
Description: The Firewall service stopped because an application filter module C:\Program Files\Microsoft ISA Server\radiusauth.dll generated an exception code C0000005 in address 635E7701 when function CompleteAsyncIO was called. To resolve this error, remove recently installed application filters and restart the service.

For more information, see Help and Support Center at http://support.microsoft.com.

This problem occurs because of a null pointer reference in the Radiusauth.dll file.

To resolve this problem, install the hotfix that is mentioned in the following Knowledge Base article on the ISA Server 2004 Standard Edition-based computer: