Article ID: 977427 - View products that this article applies to.
You create a policy rule that references a large domain name set in Microsoft Internet Security and Acceleration (ISA) Server 2006. When you back up or export configuration information for ISA Server 2006 or Microsoft Forefront Threat Management Gateway (TMG) 2010, you experience high CPU usage.
Note The supported fix for Microsoft TMG 2010 is included in Forefront TMG 2010 Service Pack 1 (SP1).
This problem occurs because the large domain name set is copied several times to the backup file. This behavior uses a lot of CPU resources.
Service pack informationThis problem is fixed in Forefront TMG 2010 Service Pack 1.
For more information about how to obtain Forefront TMG 2010 Service Pack 1, click the following article number to view the article in the Microsoft Knowledge Base:
(https://support.microsoft.com/kb/981324/ )List of problems that are fixed in Forefront Threat Management Gateway 2010 Service Pack 1
Hotfix rollup information
To resolve this problem, install the hotfix rollup package that is described in the following Microsoft Knowledge Base article:
(https://support.microsoft.com/kb/977530/ )Description of the ISA Server 2006 hotfix package: Description of the ISA Server 2006 hotfix package: December 8, 2009
Registry informationImportant This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
322756To enable this hotfix, follow these steps.
(https://support.microsoft.com/kb/322756/ )How to back up and restore the registry in Windows
To work around this issue, detach the domain name set from all policy rules before export. Then, reattach the domain name set from all policy rules after backup.
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section. This problem was first corrected in Forefront TMG 2010 Service Pack 1.
For more information about how to back up or export configuration information for ISA Server 2006, visit the following Microsoft Web site:
Article ID: 977427 - Last Review: October 6, 2011 - Revision: 7.0