In my continuing discovery of ISA 2006 issues that aren’t documented, I came across an interesting one today. One of two servers in the array was not functioning correctly. The Microsoft Firewall Service would not start, and the Event Log message was less than illuminating.
ISA Server could not load the application filter Web Proxy Filter ({4CB7513E-220E-4C20-815A-B67BAA295FF4}). FilterInit failed with the error code 0×80092004. To attempt to activate this application filter again, stop and restart the Firewall service.
Source: Microsoft Firewall
EventID: 14060
The key to this is NOT in the EventID, but in the error code 0×80092004. If you have not already, go install the err tool from Microsoft. At the command line, enter this…
err 0×80092004 [enter]
You’ll see a very cryptic response CRYPT_E_NOT_FOUND. I guess that this is trying to tell you that there is a publishing rule invoking a certificate for SSL that is not in the computer store of the ISA server….at least, that is what I found.
One of my cow-orkers apparently deleted a certificate from ONE member of the array, thinking it was not needed. I reinstalled the certificate, and successfully restarted the microsoft firewall service without further issue.
You might also enjoy:
