An SSL VPN application that has the Socket Forwarding mode set to Disabled uses 100 percent of the CPU's time in Forefront Unified Access Gateway 2010

Applies to: Forefront Unified Access Gateway 2010Microsoft Forefront Unified Access Gateway 2010 Service Pack 1

Symptoms


You publish a Secure Sockets Layer (SSL) virtual private network (VPN) application in Microsoft Forefront Unified Access Gateway (UAG) 2010. If the application is configured to have the Socket Forwarding mode set to Disabled, you may find that the W3wp.exe process uses 100 percent of the CPU's time. Additionally, the Forefront UAG server may become unresponsive.

Cause


This problem occurs when the application has port 65535 in its port range.

Resolution


To resolve this problem, install Service Pack 4 for Microsoft Forefront Unified Access Gateway 2010.

Workaround


To work around this problem, remove port 65535 from your application configuration.

Status


Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

References


See the terminology Microsoft uses to describe software updates.