5.0.5720.100 16 {E603489F-FA78-41CA-ADFE-EDC572C944DE} 0 {840238FB-A307-42D1-92B9-0C2AAE1091E2} 5.30 12 0 62 ISA2006 ISA2006 0 ISA2006.abcdgroup.com Dummy 2 C:\Program Files\Microsoft ISA Server 0.0.0.0 100 ISA2006 78984-270-2922607-04918 abcdgroup.com 5.0.5720.100 100000 50000 C: 50000 E: {179A0A70-1EF5-11D3-B160-00A0C9E3F998} msFPCProxyPlugin {25765C04-C80B-494C-914E-286297DB8C8E} msFPCProxyPlugin {49FE2B2F-3BB4-495C-87C8-3890C3C35756} msFPCProxyPlugin {4CB7513E-220E-4C20-815A-B67BAA295FF4} msFPCProxyPlugin {5126E0A1-678D-4855-9328-7ADA762F370C} msFPCProxyPlugin {680A928F-22B3-11D1-B026-0000F87750CB} msFPCProxyPlugin {74104BD8-19C4-4F4C-96A9-C8A78F73CF8E} msFPCProxyPlugin {BAA26FC5-6CB6-4DE9-9683-9EAFC491D5B4} msFPCProxyPlugin {C758F63F-E391-4AD2-AA31-D050D895BA7B} msFPCProxyPlugin {D3012DF1-F713-486A-8769-ABB0049BB633} msFPCProxyPlugin {E331F638-AB86-4AA5-9B6A-2B0248C7B4FB} msFPCProxyPlugin {FE440D49-AB26-11D2-A101-00C04FB6CFB6} msFPCProxyPlugin {FF7D8792-3439-4F11-B62C-97A7BDB8424C} msFPCProxyPlugin {0B4EE3B3-5D3B-491E-B3C1-A6674B07C9B3} msFPCISAPIFilter {0C6083D6-C159-4E28-9620-CDFECA6EFFB0} msFPCISAPIFilter {28EF0C08-E82F-41bf-8CBD-88BDF66E654B} msFPCISAPIFilter {8CDC2C87-CA94-43cb-9F36-6F68799739E2} msFPCISAPIFilter {8EA49FDD-FFDC-4190-8A66-724BB0342F9F} msFPCISAPIFilter {9DEEF135-75DB-4aab-B2AC-314FBC98EF14} msFPCISAPIFilter {D18E0F35-70FA-482A-B765-88477fA64F88} msFPCISAPIFilter {D1B72691-297D-4b2d-9AC1-4D20E231E4F1} msFPCISAPIFilter {DB71FC4B-A580-499b-B735-62203D6EC55B} msFPCISAPIFilter {dbc2b69a-d7d0-4362-9f90-e9d4eac15626} msFPCISAPIFilter {f1076e51-bbaf-48ba-a2d7-b0875211e80d} msFPCISAPIFilter Filters SMTP traffic 1 {179A0A70-1EF5-11D3-B160-00A0C9E3F998} SMTP Filter 0 Microsoft (R) Corporation 4.0 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 {dd8bed76-c415-429c-a6b8-26005a2c4902} Enables SOCKS 4 communication 0 {25765C04-C80B-494C-914E-286297DB8C8E} SOCKS V4 Filter 0 Microsoft (R) Corporation 4.0 010000000a00000050006f0072007400000002003804 {25765C04-C80B-494C-914E-286297DB8C8E} Filters DNS traffic 1 {49FE2B2F-3BB4-495C-87C8-3890C3C35756} DNS Filter 0 Microsoft (R) Corporation 4.0 00000000 {49FE2B2F-3BB4-495C-87C8-3890C3C35756} Enables HTTP proxy and cache 1 {4CB7513E-220E-4C20-815A-B67BAA295FF4} Web Proxy Filter 1 Microsoft (R) Corporation 4.0 Enables PPTP tunneling through ISA Server 1 {5126E0A1-678D-4855-9328-7ADA762F370C} PPTP Filter 1 Microsoft (R) Corporation 4.0 Enables FTP protocols (client and server) 1 {680A928F-22B3-11D1-B026-0000F87750CB} FTP Access Filter 0 Microsoft (R) Corporation 4.0 00000000 {680A928F-22B3-11D1-B026-0000F87750CB} Enables Microsoft Media Streaming protocol 1 {74104BD8-19C4-4F4C-96A9-C8A78F73CF8E} MMS Filter 0 Microsoft (R) Corporation 4.0 00000000 {74104BD8-19C4-4F4C-96A9-C8A78F73CF8E} Checks for POP buffer overflow attacks 1 {BAA26FC5-6CB6-4DE9-9683-9EAFC491D5B4} POP Intrusion Detection Filter 0 Microsoft (R) Corporation 4.0 Enables Real Time Streaming Protocol 1 {C758F63F-E391-4AD2-AA31-D050D895BA7B} RTSP Filter 0 Microsoft (R) Corporation 4.0 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 {C758F63F-E391-4AD2-AA31-D050D895BA7B} Enables RealNetworks Streaming Media protocol 1 {D3012DF1-F713-486A-8769-ABB0049BB633} PNM Filter 0 Microsoft (R) Corporation 4.0 00000000 {D3012DF1-F713-486A-8769-ABB0049BB633} Enables publishing of RPC servers 1 {E331F638-AB86-4AA5-9B6A-2B0248C7B4FB} RPC Filter 0 Microsoft (R) Corporation 4.0 00000000 {E331F638-AB86-4AA5-9B6A-2B0248C7B4FB} Enables H.323 protocol 1 {FE440D49-AB26-11D2-A101-00C04FB6CFB6} H.323 Filter 0 Microsoft (R) Corporation 4.0 010000001600000041006c006c006f00770056006900640065006f0000000b00ffff {120f7da7-5e8f-41cc-9479-a76282dbea49} 010000000e0000005500730065004c005200510000000b000000 {7c017d00-e14e-442d-b1ed-381e4dbaa3eb} 010000001400000041006c006c006f007700540031003200300000000b00ffff {95685c22-5856-45f8-99f2-c7d05595c3f8} 010000001600000041006c006c006f00770041007500640069006f0000000b00ffff {bd66fd9d-800f-4710-8d26-091e3d5caee9} 010000001600000047004b004c006f0063006100740069006f006e0000000800020000000000 {c89d976e-371c-4b68-ae69-d61caa41ce86} 00000000 {FE440D49-AB26-11D2-A101-00C04FB6CFB6} Bandwidth Splitter Application Filter 1 {FF7D8792-3439-4F11-B62C-97A7BDB8424C} Bandwidth Splitter Application Filter 0 BNTC Software 1.0.2.56 Bandwidth Splitter Web Filter 1 {0B4EE3B3-5D3B-491E-B3C1-A6674B07C9B3} Bandwidth Splitter Web Filter ffffffff0200000002000000000000004089ea498c47c801 0 Bandwidth Splitter\bs_web.dll BNTC Software 1.0.2.42 Enables RADIUS authentication 1 {0C6083D6-C159-4E28-9620-CDFECA6EFFB0} RADIUS Authentication Filter fbffffff010000000000000000000000 2 radiusauth.dll Microsoft (R) Corporation 4.0 Enables forms-based (cookie) authentication and RSA SecurID authentication 1 1 {28EF0C08-E82F-41bf-8CBD-88BDF66E654B} Forms-Based Authentication Filter fbffffff010000000200000000000000 2 CookieAuthFilter.dll Microsoft (R) Corporation 4.0 Enables DiffServ tagging of Web traffic according to URL, response and request sizes, and network. 0 {8CDC2C87-CA94-43cb-9F36-6F68799739E2} DiffServ Filter fff9ffff010000000000000000000000 2 DiffServ.dll Microsoft (R) Corporation 4.0 Enables HTTP/HTTPS compression 1 {8EA49FDD-FFDC-4190-8A66-724BB0342F9F} Compression Filter fffbffff010000000000000000000000 2 comphp.dll Microsoft (R) Corporation 4.0 Enables link translation for published Web servers 1 1 {9DEEF135-75DB-4aab-B2AC-314FBC98EF14} Link Translation Filter fdffffff010000000000000000000000 1 LinkTranslation.dll Microsoft (R) Corporation 4.0 Enables caching of compressed HTTP content 1 {D18E0F35-70FA-482A-B765-88477fA64F88} Caching Compressed Content Filter ffffffff0300000003000000000000004089ea498c47c8014089ea498c47c801 0 complp.dll Microsoft (R) Corporation 4.0 Enables authentication delegation to the published web servers 1 1 {D1B72691-297D-4b2d-9AC1-4D20E231E4F1} Authentication Delegation Filter fffeffff010000000000000000000000 2 authdflt.dll Microsoft (R) Corporation 4.0 Enables publishing of load balanced farms of Web servers 1 1 {DB71FC4B-A580-499b-B735-62203D6EC55B} Web Publishing Load Balancing Filter fffaffff010000000000000000000000 2 WPLoadBalancer.dll Microsoft (R) Corporation 4.0 Provides LDAP Authentication 1 1 {dbc2b69a-d7d0-4362-9f90-e9d4eac15626} LDAP Authentication Filter fcffffff010000000000000000000000 2 ldapfilter.dll Microsoft (R) Corporation 4.0 Filters HTTP traffic and enforces configurable HTTP policy 1 {f1076e51-bbaf-48ba-a2d7-b0875211e80d} HTTP Filter ffffffff02000000503fe8498c47c8014089ea498c47c801 0 HttpFilter.dll Microsoft (R) Corporation 4.0 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 {2EAE0173-FC4E-49F4-9E0F-483EC5B2CEB5} 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 {EEC9EA9F-10B2-422A-A890-B65A6EFFBF84} Weekends 414141414141414141414141414141414141414141414141 Work hours 0000000000000000003e3e3e3e3e3e3e3e00000000000000 10.0.0.70 ameer 10.0.0.89 sbg-macbook Predefined computer set of all IP address ranges. Anywhere 1 0.0.0.0 255.255.255.255 Anywhere Predefined computer set for IP addresses of the IPsec remote VPN gateways. IPsec Remote Gateways 1 Computers allowed to manage ISA Server remotely Remote Management Computers 1 10.0.0.180 housine-pc 10.0.1.1 manar 10.0.0.70 pc 10.0.0.89 sbg-macbook 10.0.0.51 wasem1 10.0.0.1 10.0.254.255 all user Predefined domain name set used to allow Watson error reporting. watson.microsoft.com *.watson.microsoft.com Microsoft Error Reporting Sites 1 This domain set holds a list of all Microsoft update servers *.windowsupdate.com windowsupdate.microsoft.com *.windowsupdate.microsoft.com *.update.microsoft.com download.windowsupdate.com download.microsoft.com *.download.windowsupdate.com wustat.windows.com ntservicepack.microsoft.com Microsoft Update Domain Name Set Predefined domain name set used to allow access to trusted sites for maintenance and management. *.microsoft.com *.windows.com *.windowsupdate.com System Policy Allowed Sites 1 16 American Online Instant Messenger protocol {c9753840-d4a2-11d2-bbc4-00a0c9d785a6} AOL Instant Messenger 1 16 1 5190 5190 16 Archie protocol {e5dd5590-d4a2-11d2-bbc4-00a0c9d785a6} Archie 1 17 3 1525 1525 16 Character generator protocol (TCP) {f57ee7e7-5c50-4354-9425-43b7f6bbc638} Chargen (TCP) 1 1 19 19 16 Character generator protocol (UDP) {bbde8d5a-ba4e-41d3-bf65-66fe09a5ac53} Chargen (UDP) 1 17 3 19 19 16 Daytime protocol (TCP) {844761e7-8396-4a02-9324-eb9acb2690e9} Daytime (TCP) 1 1 13 13 16 Daytime protocol (UDP) {f9f06b3f-f1a1-4b06-ade2-6e91ad0065f6} Daytime (UDP) 1 17 3 13 13 16 {a3244b59-ca48-4619-8163-0b65676bd959} DHCP (reply) 1 4 17 1 68 68 16 {41a83821-46f6-43cf-aba0-8be480aa7826} DHCP (request) 1 4 17 1 67 67 16 Discard protocol (TCP) {c64ade8c-0d43-4d5c-9eea-6708f849f7ed} Discard (TCP) 1 1 9 9 16 Discard protocol (UDP) {6ddd971f-33c3-4460-b4b0-060c509385c1} Discard (UDP) 1 17 3 9 9 16 Domain Name System Protocol {01b44810-d4a3-11d2-bbc4-00a0c9d785a6} DNS 1 6 1 53 53 17 3 53 53 1 16 Domain Name System protocol - Server. An inbound protocol used for server publishing. {312abc14-0ad0-497f-ad82-c624357d00a8} DNS Server 1 4 {49FE2B2F-3BB4-495C-87C8-3890C3C35756} msFPCProxyPlugin 53 53 17 2 53 53 16 Echo protocol (TCP) {1fb8fa00-d4a3-11d2-bbc4-00a0c9d785a6} Echo (TCP) 1 1 7 7 16 Echo protocol (UDP) {3bfc6ad0-d4a3-11d2-bbc4-00a0c9d785a6} Echo (UDP) 1 17 3 7 7 16 Protocol used for publishing Exchange server for RPC access from the External network. {2297692C-E2E7-40BD-9A32-5F4D49455AA5} Exchange RPC Server 1 8 {E331F638-AB86-4AA5-9B6A-2B0248C7B4FB} msFPCProxyPlugin 135 135 020000000a000000540079007000650000000300010000001000000043006f006d006d0065006e007400000008002c00000049006e0066006f0072006d006100740069006f006e002000530074006f007200650020002800310029000000 {0E4A0156-DD5D-11D2-8C2F-00C04FB6BCDE} 020000000a000000540079007000650000000300010000001000000043006f006d006d0065006e007400000008002c00000049006e0066006f0072006d006100740069006f006e002000530074006f007200650020002800330029000000 {10F24E8E-0FA6-11D2-A910-00C04F990F3B} 020000000a000000540079007000650000000300010000001000000043006f006d006d0065006e007400000008002c00000049006e0066006f0072006d006100740069006f006e002000530074006f007200650020002800320029000000 {1453C42C-0FA6-11D2-A910-00C04F990F3B} 020000000a000000540079007000650000000300010000001000000043006f006d006d0065006e007400000008001c0000004400690072006500630074006f007200790020005200460052000000 {1544F5E0-613C-11D1-93DF-00C04FD7BD09} 020000000a000000540079007000650000000300010000001000000043006f006d006d0065006e0074000000080012000000440061007400610062006100730065000000 {1A190310-BB9C-11CD-90F8-00AA00466520} 020000000a000000540079007000650000000300010000001000000043006f006d006d0065006e007400000008001a0000004d0054004100200027005100410064006d0069006e0027000000 {38A94E72-A9BC-11D2-8FAF-00C04fA378FF} 020000000a000000540079007000650000000300010000001000000043006f006d006d0065006e0074000000080044000000530079007300740065006d00200041007400740065006e00640061006e00740020005000750062006c0069006300200049006e0074006500720066006100630065000000 {469D6EC0-0D87-11CE-B13F-00AA003BAC6C} 020000000a000000540079007000650000000300010000001000000043006f006d006d0065006e0074000000080032000000530079007300740065006d00200041007400740065006e00640061006e007400200050007200690076006100740065000000 {83D72BF0-0D89-11CE-B13F-00AA003BAC6C} 020000000a000000540079007000650000000300010000001000000043006f006d006d0065006e0074000000080020000000530074006f00720065002000610064006d0069006e0020002800320029000000 {89742ACE-A9ED-11CF-9C0C-08002BE7AE86} 020000000a000000540079007000650000000300010000001000000043006f006d006d0065006e0074000000080020000000530074006f00720065002000610064006d0069006e0020002800310029000000 {99E64010-B032-11D0-97A4-00C04FD6551D} 020000000a000000540079007000650000000300010000001000000043006f006d006d0065006e00740000000800080000004d00540041000000 {9E8EE830-4459-11CE-979B-00AA005FFEBE} 020000000a000000540079007000650000000300010000001000000043006f006d006d0065006e0074000000080020000000530074006f00720065002000610064006d0069006e0020002800330029000000 {A4F1DB00-CA47-1067-B31E-00DD010662DA} 020000000a000000540079007000650000000300010000001000000043006f006d006d0065006e007400000008001a000000530074006f0072006500200045004d0053004d00440042000000 {A4F1DB00-CA47-1067-B31F-00DD010662DA} 020000000a000000540079007000650000000300010000001000000043006f006d006d0065006e007400000008001c0000004400690072006500630074006f007200790020004400520053000000 {F5CC59B4-4264-101A-8C59-08002B2F8426} 020000000a000000540079007000650000000300010000001000000043006f006d006d0065006e007400000008001c0000004400690072006500630074006f007200790020004e00530050000000 {F5CC5A18-4264-101A-8C59-08002B2F8426} 020000000a000000540079007000650000000300010000001000000043006f006d006d0065006e007400000008001c0000004400690072006500630074006f007200790020005800440053000000 {F5CC5A7C-4264-101A-8C59-08002B2F8426} 020000000a000000540079007000650000000300010000001000000043006f006d006d0065006e0074000000080032000000530079007300740065006d00200041007400740065006e00640061006e007400200043006c00750073007400650072000000 {F930C514-1215-11D3-99A5-00A0C9B61B04} 16 Finger protocol {7eb3b980-d4a3-11d2-bbc4-00a0c9d785a6} Finger 1 1 79 79 1 255 File Transfer Protocol {f2e5ee50-030c-11d3-acd4-00a0c9d7559D} FTP 1 256 {680A928F-22B3-11D1-B026-0000F87750CB} msFPCProxyPlugin 1 21 21 1 255 File Transfer Protocol - Server. An inbound protocol used for server publishing {5CDDC642-932D-4134-A1DB-250574052D00} FTP Server 1 256 {680A928F-22B3-11D1-B026-0000F87750CB} msFPCProxyPlugin 21 21 255 Gopher protocol {bc475bc0-d4a3-11d2-bbc4-00a0c9d785a6} Gopher 1 1 70 70 1 255 H.323 protocol - Ports and channels: Q.931/H.245/RTP/RTCP/T.120 {41192800-1d25-11d3-8f7c-00c04f57b90b} H.323 Protocol 0 16 {FE440D49-AB26-11D2-A101-00C04FB6CFB6} msFPCProxyPlugin 1 1720 1720 255 Hyper Text Transfer Protocol (HTTP) {df6cabc0-d4a3-11d2-bbc4-00a0c9d785a6} HTTP 1 322 {4CB7513E-220E-4C20-815A-B67BAA295FF4} msFPCProxyPlugin 1 80 80 16 Protocol used by HTTP clients (such as Internet Explorer) to send HTTP requests to an outbound HTTP proxy server. {cc6c97b4-eddd-4ee9-88e1-031d268f9d1b} HTTP Proxy 1 1 8080 8080 255 Secure Hyper Text Transfer Protocol {fe3e20d0-d4a3-11d2-bbc4-00a0c9d785a6} HTTPS 1 258 1 443 443 16 Secure Hyper Text Transfer Protocol - Server. An inbound protocol used for server publishing. {e6528ce0-bc32-4a63-bc59-e400236d44ff} HTTPS Server 1 258 443 443 16 Citrix Intelligent Console Architecture protocol {3b5c7c5d-fbeb-40c6-87ff-a71470243887} ICA 1 32 17 3 1604 1604 1 1494 1494 16 Citrix Intelligent Console Architecture session with Session Reliability enabled protocol {340191d0-3069-4b9c-bf29-e935ad607cd8} ICA session w/ Session Reliability enabled 1 32 17 3 1604 1604 1 2598 2598 16 {ce060bef-0c3a-4a86-9b94-74c3a1b57ac9} ICMP Information Request 1 4 1 3 15 16 {ac1aa2b2-75ce-44f6-98eb-149b03019159} ICMP Timestamp 1 4 1 3 13 16 ICQ instant messenger protocol (legacy) {0f00f750-d4a4-11d2-bbc4-00a0c9d785a6} ICQ 1 16 17 5000 1025 1 5000 1025 17 1 4000 4000 16 ICQ 2000 protocol {72140E45-6686-43c5-A9B8-3E60F4C895DB} ICQ 2000 1 16 1 5190 5190 16 Ident protocol {9cd616cd-1a2b-446d-8eea-93c5f9069bef} Ident 1 1 113 113 16 {aa111d05-bb53-49ed-a809-68cffd363f74} IKE Client 1 128 17 3 500 500 16 Internet Key Exchange protocol - Server. An inbound protocol used for server publishing. {54dd31b5-7649-4b9e-95e8-361b19188673} IKE Server 1 128 17 2 500 500 16 Interactive Mail Access {2d677540-d4a4-11d2-bbc4-00a0c9d785a6} IMAP4 1 8 1 143 143 16 Protocol (IMAP) - Server. An inbound protocol used for server publishing. {23761058-9560-4a30-8738-9D9A28A43A39} IMAP4 Server 1 8 143 143 16 Secure Interactive Mail Access Protocol {4bacec96-40f1-45aa-b44b-62d75367a0c1} IMAPS 1 8 1 993 993 16 Secure Interactive Mail Access Protocol (IMAP) - Server. An inbound protocol used for server publishing. {CD95FC32-34B8-4e5c-A720-471EF10A0F7E} IMAPS Server 1 10 993 993 16 {44889BC5-3451-46FD-8278-28F23EC45BAA} IPsec ESP 1 128 50 3 16 IPsec ESP Protocol -- Inbound server protocol used in virtual private network (VPN) site-to-site system policy rules to enable ESP traffic to the TOKE_FAMILY_PRODUCT_NAME computer. This protocol is not used for server publishing. {C9E52ACC-F821-4d7b-BBD1-145302E7D274} IPsec ESP Server 1 128 50 2 16 {27423a60-59e3-48c1-bef0-af5827815313} IPsec NAT-T Client 1 128 17 3 4500 4500 16 IPsec NAT-T protocol - Server. An inbound protocol used for server publishing. {c25bfe73-bcb4-47a4-acb0-da39cfa2de09} IPsec NAT-T Server 1 128 17 2 4500 4500 16 Internet Relay Chat {44dccc20-d4a4-11d2-bbc4-00a0c9d785a6} IRC 1 16 1 6667 6667 16 Protocol used for Web access to the ISA Server computer for remote management. {D891983B-E1D1-4c65-8926-12BFF81462C4} ISA Server Web Management 1 32 1 2175 2175 16 Kerberos administration (TCP) {579f5b48-4af3-4cb8-9cd1-223bdfcac2ae} Kerberos-Adm (TCP) 1 512 1 749 749 16 Kerberos administration (UDP) {5b6dee6e-13c8-4934-9b8d-faed9dee6820} Kerberos-Adm (UDP) 1 512 17 3 749 749 16 Kerberos IV Authentication protocol {b40d34f7-4cc3-4685-945b-b60156ab46da} Kerberos-IV 1 512 17 3 750 750 16 Kerberos V authentication protocol {12b3235b-25ab-4bdb-8cb3-1964c9926189} Kerberos-Sec (TCP) 1 512 1 88 88 16 Kerberos V authentication protocol (UDP) {472841ff-a07e-4fe5-bf6b-8e133c542fd1} Kerberos-Sec (UDP) 1 512 17 3 88 88 16 {12BE2A29-CA09-433b-AA85-C8CD6CE9740C} L2TP Client 1 128 17 3 1701 1701 16 Layer 2 Tunneling Protocol - Server. An inbound protocol used for server publishing. {F7BBA53D-9AAB-4fbb-A15C-F510E2FEDF48} L2TP Server 1 128 17 2 1701 1701 16 Lightweight Directory Access Protocol (LDAP) {5eb0c870-d4a4-11d2-bbc4-00a0c9d785a6} LDAP 1 12 1 389 389 16 Lightweight Directory Access Protocol UDP (LDAP-UDP) {1ce4b611-45e2-4392-ae9d-60922ee6c328} LDAP (UDP) 1 8 17 3 389 389 16 Lightweight Directory Access Protocol global catalog protocol {39874bf7-3d52-4875-b1ee-273fad1c7a2f} LDAP GC (Global Catalog) 1 1 3268 3268 16 Secure Lightweight Directory Access Protocol {975b0057-5452-4569-b1b4-2a16f2f38c61} LDAPS 1 8 1 636 636 16 Secure Lightweight Directory Access Protocol global catalog protocol {800851e2-109e-442b-9131-6cbd341c8dc6} LDAPS GC (Global Catalog) 1 1 3269 3269 16 {5b2352c6-b9a4-46a8-b0df-8243f061d0a6} Microsoft CIFS (TCP) 1 1 445 445 16 {12150c0b-75a7-4a5b-8021-f143b66f60ef} Microsoft CIFS (UDP) 1 17 3 445 445 16 Protocol used by the Microsoft Firewall Client software to communicate with the Firewall service on the ISA Server computer. Also known as the Firewall Client control channel. {4e53f017-6f4a-4e0a-9dbc-0af34819b2f7} Microsoft Firewall Client (TCP) 1 1 1745 1745 16 Protocol used by the Microsoft Firewall Client software to communicate with the Firewall service on the ISA Server computer. Also known as the Firewall Client control channel. {477d3a3a-ef51-40f2-ae26-2b85e2752c3f} Microsoft Firewall Client (UDP) 1 17 3 1745 1745 16 {fa1319ca-db64-4c15-b4a4-c0173ee6f36a} Microsoft Operations Manager Agent 1 8 1 1270 1270 17 3 1270 1270 16 {1e3db1aa-bbdd-4ebf-900b-f4ec3505cb58} Microsoft SQL (TCP) 1 1 1433 1433 16 {4f0a479d-095a-4620-941f-41b15f752126} Microsoft SQL (UDP) 1 17 3 1434 1434 16 Microsoft SQL Server protocol {eef8aafa-b029-4544-81de-34eed138c9ae} Microsoft SQL Server 1 1433 1433 1 255 Microsoft Media Streaming protocol - Client {C9C5500B-B782-43e8-AB1F-EB8CAB33C691} MMS 1 64 {74104BD8-19C4-4F4C-96A9-C8A78F73CF8E} msFPCProxyPlugin 17 1 1755 1755 1 1755 1755 1 255 Microsoft Media Server protocol - Server. An inbound protocol used for server publishing {209D2BAE-7846-4b53-A649-D0529EA173B9} MMS Server 1 64 {74104BD8-19C4-4F4C-96A9-C8A78F73CF8E} msFPCProxyPlugin 17 1755 1755 1755 1755 16 Microsoft ISA Server Secure Control Protocol {7c18c1cf-4a41-41f0-8d78-a75ecd945448} MS Firewall Control 1 1 3847 3847 16 MSN Internet Access protocol {4b87fe00-d527-11d2-bbc4-00a0c9d785a6} MSN 1 1 569 569 16 MSN Messenger protocol {67ff0e26-57ed-4440-9562-e24d00427d49} MSN Messenger 1 18 1 1863 1863 16 Net2Phone protocol {9db1a080-d4a4-11d2-bbc4-00a0c9d785a6} Net2Phone 1 16 17 4000 3000 17 1 5000 1025 1 7900 7800 17 3 2100 2000 17 1 6801 6801 16 Net2Phone registration protocol {c0645570-d4a4-11d2-bbc4-00a0c9d785a6} Net2Phone registration 1 16 1 6500 6500 16 NetBIOS Datagram protocol {d4ed71e3-6bb5-4ea6-9617-cd26c3cc3ddb} NetBios Datagram 1 4 17 1 138 138 16 NetBIOS Name Service protocol {49fbd904-ade0-4464-a25e-2c14b7775ff4} NetBios Name Service 1 4 17 3 137 137 16 NetBIOS Session protocol {ef2ab3ab-47aa-4b0f-b907-d53704d4aace} NetBios Session 1 4 1 139 139 16 Network News Transfer Protocol (NNTP) {dec02110-d4a4-11d2-bbc4-00a0c9d785a6} NNTP 1 8 1 119 119 16 Network News Transfer Protocol - Server. An inbound protocol used for server publishing. {4146056B-1B3D-43af-8C3C-BA25035F2841} NNTP Server 1 8 119 119 16 Secure Network News Transfer Protocol {12e5b068-b583-471e-aa74-af316f0999c3} NNTPS 1 8 1 563 563 16 Secure Network News Transfer Protocol - Server. An inbound protocol used for server publishing. {D6BC53DE-7215-443e-B57A-4E19D82241AF} NNTPS Server 1 8 563 563 16 Network Time Protocol (UDP) {a0b15a8f-a2aa-4c04-a0e6-8d211ddaf92a} NTP (UDP) 1 4 17 123 123 17 3 123 123 16 {575806a9-0390-43b5-be1c-92c81de41de8} PING 1 6 1 3 8 1 255 Progressive Networks streaming media protocol {CC263ACF-2F2B-4ff4-B45D-3D7F8AC43D8D} PNM 1 64 {D3012DF1-F713-486A-8769-ABB0049BB633} msFPCProxyPlugin 1 7070 7070 1 255 Progressive Networks streaming media protocol - Server. An inbound protocol used for server publishing {17844508-CBC3-48c3-BC5B-723E99B6B95A} PNM Server 1 64 {D3012DF1-F713-486A-8769-ABB0049BB633} msFPCProxyPlugin 7070 7070 16 Post Office Protocol v.2 {a7edda09-3a88-4d21-a0fd-8d27cffe066c} POP2 1 {BAA26FC5-6CB6-4DE9-9683-9EAFC491D5B4} msFPCProxyPlugin 1 109 109 16 Post Office Protocol v.3 {0584fbe0-d4a5-11d2-bbc4-00a0c9d785a6} POP3 1 10 1 110 110 16 Post Office Protocol v.3 - Server. An inbound protocol used for server publishing. {B7DF2692-E3FC-4c2e-8A28-96604A59275B} POP3 Server 1 10 {BAA26FC5-6CB6-4DE9-9683-9EAFC491D5B4} msFPCProxyPlugin 110 110 16 Secure Post Office Protocol v.3 {c45b541b-5f33-45a9-8289-a6e8ecf9b0c2} POP3S 1 8 1 995 995 16 Secure Post Office Protocol v.3 - Server. An inbound protocol used for server publishing. {84A0F331-1085-48c6-94E3-3C3B2B4BA13E} POP3S Server 1 10 995 995 1 16 Enables PPTP tunneling through ISA Server {18CC0FE0-C739-44e5-95AC-D6AE3A2F54FA} PPTP 1 128 {5126E0A1-678D-4855-9328-7ADA762F370C} msFPCProxyPlugin 1 1723 1723 1 255 Point-to-Point Tunneling Protocol - Server. An inbound protocol used for server publishing {EBF16363-3E3A-403D-9AFD-129CDBBBC1A6} PPTP Server 1 128 {5126E0A1-678D-4855-9328-7ADA762F370C} msFPCProxyPlugin 1723 1723 16 Quote of the day protocol (TCP) {4c8aaa15-6ae1-491f-a792-20b51cce448c} Quote (TCP) 1 1 17 17 16 Quote of the day protocol (UDP) {5f2a356d-0344-49fd-ae1d-678e0374e916} Quote (UDP) 1 17 3 17 17 16 Remote Authentication Dial-In User Service protocol {cc637256-0cbc-4d44-846a-12768079623c} RADIUS 1 17 3 1812 1812 16 Remote Authentication Dial-In User Service accounting protocol {3d7b63ca-3dcb-4957-a322-978cb8bf2d08} RADIUS Accounting 1 512 17 3 1813 1813 16 Remote Desktop Protocol (Terminal Services) {c8510020-2abc-4ba8-8554-312022fe6987} RDP (Terminal Services) 1 32 1 3389 3389 16 Remote Desktop Protocol (Terminal Services) - Server {D3E603C1-E5D7-4dbc-8CE4-04AF3705C26E} RDP (Terminal Services) Server 1 32 3389 3389 16 Routing Information Protocol {ea627d62-ba7a-429e-814b-8a584453eb35} RIP 1 4 17 3 520 520 16 Remote login protocol {b526b715-c863-438b-8a1c-4698ca2bcdc9} Rlogin 1 32 1 513 513 16 {11556F74-6699-4857-98C6-792774484729} RPC (all interfaces) 1 {E331F638-AB86-4AA5-9B6A-2B0248C7B4FB} msFPCProxyPlugin 1 135 135 1 255 Remote Procedure Call protocol - Server. An inbound protocol used for server publishing (All RPC interfaces). {E4BF0A2E-D51D-48CE-9FBC-19A694413833} RPC Server (all interfaces) 0 {E331F638-AB86-4AA5-9B6A-2B0248C7B4FB} msFPCProxyPlugin 135 135 020000000a000000540079007000650000000300010000001000000043006f006d006d0065006e0074000000080046000000500073006500750064006f00200055005500490044002c00200065006e00610062006c0065007300200061006c006c0020005200500043002000550055004900440073000000 {D84A98AA-12BD-4E31-9114-9AF0FBD81570} 1 255 Real Time Streaming Protocol - Client {D8D4D4A5-B30E-40a5-8061-C7CD7C1B9179} RTSP 1 64 {C758F63F-E391-4AD2-AA31-D050D895BA7B} msFPCProxyPlugin 1 554 554 1 255 Real Time Streaming Protocol - Server. An inbound protocol used for server publishing {D0F0EC38-CFAD-42ed-B86B-CEFB71CC6936} RTSP Server 1 64 {C758F63F-E391-4AD2-AA31-D050D895BA7B} msFPCProxyPlugin 554 554 16 {bd04bad5-f400-42be-8a01-60ee1ae68e14} SecurID 1 512 17 3 5500 5500 16 Simple Mail Transfer Protocol (SMTP) {57cf0ac0-d4a5-11d2-bbc4-00a0c9d785a6} SMTP 1 10 1 25 25 16 Simple Mail Transfer Protocol - Server. An inbound protocol used for server publishing. {4E67CFB8-4B70-4C39-B079-EF1775E636C9} SMTP Server 1 10 {179A0A70-1EF5-11D3-B160-00A0C9E3F998} msFPCProxyPlugin 25 25 16 Secure Simple Mail Transfer Protocol {282ee7c5-87be-4bfe-b304-0a152bbee88d} SMTPS 1 8 1 465 465 16 Secure Simple Mail Transfer Protocol - Server. An inbound protocol used for server publishing. {ED2A200B-9E2A-41a1-A086-DF2EFC38D65B} SMTPS Server 1 10 465 465 16 Simple Network Management Protocol {cc96e9e3-b2ba-4d81-8c95-fb92a7366b23} SNMP 1 4 17 3 161 161 16 Simple Network Management Protocol - Trap {53496cef-c05c-4c08-b737-58f6cf7954ab} SNMP Trap 1 4 17 3 162 162 16 Protocol that allows client-server applications to use the services of a network firewall. SOCKS is defined in RFC 1928. {133cbfbe-8989-4708-85b1-0f2c9ca90665} SOCKS 1 1 1080 1080 16 Secure Shell protocol {1d5b7d70-ec8b-4e23-a1a1-0474a116adb5} SSH 1 32 1 22 22 1 -5 {28A46BA3-C2CF-49D8-B7B6-A181CAB2FD19} TCP Inbound 0 {FF7D8792-3439-4F11-B62C-97A7BDB8424C} msFPCProxyPlugin 65535 1 1 -5 {C1CA68DE-75CD-4972-BFBE-2AA4076751B2} TCP Outbound 0 {FF7D8792-3439-4F11-B62C-97A7BDB8424C} msFPCProxyPlugin 1 65535 1 16 Telnet protocol {930715f0-d4a5-11d2-bbc4-00a0c9d785a6} Telnet 1 34 1 23 23 16 Telnet protocol - Server. An inbound protocol used for server publishing. {5b4a81e2-ac9c-45e3-a12b-b1b1b95ebcdc} Telnet Server 1 34 23 23 16 Trivial File Transfer Protocol {4ca6aa81-a6e6-4384-a789-89eb705f9026} TFTP 1 17 2 17 1 69 69 16 Time protocol (TCP) {e2603980-d51d-11d2-bbc4-00a0c9d785a6} Time (TCP) 1 1 37 37 16 Time protocol (UDP) {eb531bfb-2f31-450b-ae1e-64d276a6fab8} Time (UDP) 1 17 3 37 37 1 -5 {83AA2457-0578-45BA-807F-7E000B7C3E31} UDP Inbound 0 {FF7D8792-3439-4F11-B62C-97A7BDB8424C} msFPCProxyPlugin 17 2 65535 1 1 -5 {B9861751-67AA-4484-98ED-0FD781319330} UDP Outbound 0 {FF7D8792-3439-4F11-B62C-97A7BDB8424C} msFPCProxyPlugin 17 3 65535 1 16 Nickname/Whois protocol {d9e467f0-d4a5-11d2-bbc4-00a0c9d785a6} WhoIs 1 1 43 43 255 The action associated with this alert failed. {FFFF8EA4-94EC-11D2-AF53-00E02C069419} 0 Alert Action Failure 1 255 The application filter was not registered on this server. {62B91127-F0EA-4bdf-9117-818887D6A435} 0 Application Filter Not Registered. 1 4 The cache container initialization failed and the initialization was ignored. {1FE2A7A6-C8D0-4318-A9EC-B9C50C83BC1C} 0 Cache Container Initialization Error 1 Any Successful Failure 4 Recovery of a single cache container was completed. {05D1B873-DE91-4d43-96A6-97D1D8613143} 0 Cache Container Recovery Complete 1 4 The operation to reduce the size of the cache file failed. {BCB08CF0-1EF9-4daa-8D16-3DC6A9217CF1} 0 Cache File Resize Failure 1 4 The Web cache proxy was disabled because of a global failure. {C4433C88-106C-4d2c-8810-370549D79855} 0 Cache Initialization Failure 1 255 ISA Server failed to initialize the cache because the Network Services account does not have sufficient permissions for the root folder and the Urlcache folder on one or more cache drives. The Network Services account must have the List Folder and Read permissions for the root folder and the Read permission for the Urlcache folder to open the Urlcache folder on every cache drive. Verify that the Network Services account has at least the List Folder and Read permissions for the root folder and the Read permission for the Urlcache folder on all cache drives. {a86bb1e7-c931-11da-a861-0014222a9435} 0 Cache Permissions Insufficient 1 Any No errors Errors 4 The cache content restoration was completed. {AA1CF1A4-FCC2-45ce-9F01-6D56D69E680B} 0 Cache Restoration Completed 1 4 An attempt to write content to the cache failed. {D1005BF7-4927-48d9-BF34-823EA2054326} Cache write error 1 4 During cache recovery, an object with conflicting information was detected. The conflicting object was discarded. {E207320E-59B2-4b55-8600-471553A60DCB} 0 Cached Object Ignored 1 255 The ISA Server certificate will expire in less than 30 days. {a0987424-62db-53af-af02-995abb69d3c1} Certificate on ISA Server about to expire 1 255 The ISA Server certificate has expired or is not yet valid {a0987424-62db-439f-af02-995abb69d3c1} Certificate on ISA Server invalid 1 255 Client/server communication failure {FFFF8EA7-94EC-11D2-AF53-00E02C069419} Client/server communication failure 1 255 One or more code pages are invalid, or the applicable conversion tables are not installed. {39B0FE76-E6DE-4944-997B-E2D04661A583} 0 Code Page Invalid 1 Any component System DLL Application filter Web filter 255 An attempt to load an extension component failed. {FFFF8E95-94EC-11D2-AF53-00E02C069419} 0 Component load failure 1 255 A response compressed by an unsupported method (indicated in the HTTP Content-Encoding header) was recieved. ISA Server supports only gzip compression. {cb1a3322-f0fe-6c4c-bb56-67f4427f3963} Compression by Unsupported Method 1 255 ISA Server failed to compress the content of a response. {cb1a3322-f0fe-5b3b-bb56-67f4427f3963} Compression Failure 1 255 The Compression Filter cannot handle a response because the memory allocated for compression is fully utilized. {cb1a3322-f0fe-9f9f-bb56-67f4427f3963} Compression Failure (Allocated Memory Exhausted) 1 255 ISA Server was unable to decompress the content of a response. {cb1a3322-f0fe-4a2a-bb56-67f4427f3963} Compression Failure (Decompression Failed) 1 255 The compression filters are misconfigured. Both filters must be in the same state, either enabled or disabled. {cb1a3322-f0fe-7d5d-bb56-67f4427f3963} Compression Failure (Filter Misconfiguration) 1 255 The ISA Server configuration is invalid. {FFFF8E93-94EC-11D2-AF53-00E02C069419} 0 Configuration Error 1 255 An IP address exceeded its connection limit {A0F22A40-04D6-4509-BCB7-21C22A09E294} Connection Limit Exceeded 1 255 The number of connections per second allowed for a rule was exceeded. See the help for more information on connection limits. {87B76595-0CD5-4EF4-A3A1-9E458FD210FD} Connection Limit for a Rule was Exceeded 1 255 ISA Server tried to delegate credentials, but the published Web site rejected the credentials. {8DE12CB2-D43B-4b95-B03A-F41AFE072CAB} Credentials Delegation Failure 1 255 ISA Server failed to delegate credentials using Kerberos constrained delegation to a published Web site. {21D31CCE-B84C-4448-BBAF-69043D9DEB09} Credentials Delegation Using Kerberos Constrained Delegation Failure 1 255 The DHCP anti-poisoning intrusion detection mechanism was disabled. {9E34B2AE-0243-45B5-B35E-470DB941911D} DHCP Anti-Poisoning Intrusion Detection Disabled 1 255 An attempt to create a dial-on-demand connection failed, either because there is no answer or the line is busy. {FFFF8E9D-94EC-11D2-AF53-00E02C069419} 10 0 Dial-On-Demand Failure 1 All DNS Intrusions DNS Hostname Overflow DNS Length Overflow DNS Zone Transfer 255 Detects Hostname Overflow, Length Overflow and Zone Transfer attacks. {FB07D159-5744-4d63-B05D-0BAF93B059E3} DNS Intrusion 1 255 An attempt to log the event information to the system event log failed. {FFFF8E92-94EC-11D2-AF53-00E02C069419} Event Log Failure 1 255 The FTP filter failed to parse the allowed ftp commands. Verify that the commands are stored in the correct format. Each command should be no more than 4 characters long and each command should be seperated from the previous one with a space character. {7CFAC8D5-0610-493a-8815-07788161970D} 0 FTP Filter Initialization Warning 1 255 The number of denied TCP and non-TCP packets per second exceeded the allowed limit {7310dada-656e-4e06-be15-bc2e5d40261c} Global denied packets rate limit 1 Any intrusion All port scan attack Well-known port scan attack IP half scan attack Land attack Ping of death attack UDP bomb attack Windows out-of-band attack 255 An intrusion was attempted by an external user. {bebe6638-ac58-44f5-a39c-71ea4bb558af} Intrusion Detected 1 255 Client certificate was revoked due to invalid or missing Certificate Revocation List (CRL). The CRL may have expired and ISA Server was unable to download a valid CRL. Verify that the CRL download system policy configuration group is enabled and that there is connectivity to the CRL Distribution Points (CDPs). {9c2267b1-aff9-4557-8836-cfe9eae1411e} Invalid CRL Found 1 255 The IP address offered by the DHCP server is not valid. {ec9aacee-a429-4ad6-93ef-b5342c085700} Invalid DHCP offer 1 255 Dial-on-demand credentials are invalid. {FFFF8EA0-94EC-11D2-AF53-00E02C069419} 10 0 Invalid dial-on-demand credentials 1 255 A network adapter is configured with several IP addresses which belong to several networks. This is not a valid configuration. {E94EA941-9CC6-44ab-A628-8F4037924EBA} 0 Invalid network adapter configuration 1 255 The IP packet source address is not valid. {1e1cc2df-61f6-49a6-96f5-c663d2c8a066} 5 IP Spoofing 1 255 Changes made to the configuration will only take effect after restarting the computer. {CE368F95-9F52-4B31-8F8C-6DB2D7003084} 0 ISA Server Computer Restart Is Required 1 255 The connection to the LDAP server was restored. {7C020B78-B8A8-442C-B61B-666C3208A4A5} 0 LDAP Server Recovered 1 255 The LDAP server requested did not respond. {D763C50D-B281-44C2-92F4-4962EE02A78E} 0 LDAP Server Unavailable 1 255 The Web listener used in a Web Publishing rule specifies HTTP connections to the clients, but the rule specifies an HTTPS connection to the published server or web farm. HTTPS links will be translated to HTTP links. {B1BBD7A9-7367-47f2-AB52-EE4B33669EE9} 0 Link Translation Configuration Insecure 1 255 One or more link translation mappings are invalid. Link translation mappings must be between 4 and 2057 bytes. The invalid mappings will be ignored. {3CCFE8F5-49EB-4945-BEAF-94568037FA37} 0 Link Translation Configuration Invalid 1 255 The URL of a site specified in the list of unpublished sites for link translation redirection contains one or more non-ANSI characters. {A9B94F4D-17F2-46e4-8B2B-2BB9D471D226} 0 Link Translation Redirection Unpublished Site Contains Invalid Character 1 255 The length of the URL for a site specified in the list of unpublished sites for link translation redirection is invalid. {EF8CACB2-9D5A-497f-8952-2FC2029100DD} 0 Link Translation Redirection Unpublished Site Length Invalid 1 255 Log deletion according to the configuration failed. {915F3E34-5954-4ff1-B12F-58E4313876EB} Log Deletion Failure 1 Any ISA Server service ISA Server Firewall service ISA Server Web filter 255 One of the service logs failed. {C53667EF-78AE-4C73-B625-0409959D5321} 0 Log Failure 1 Any Free space limit almost reached Free space limit exceeded Total size limit almost reached Total size limit exceeded Logging resumed 255 One or more of the log storage limits was reached. {77187CDA-B3AD-4A5B-A99A-E9375B90174C} Log Storage Limits 1 Any ISA Server service ISA Server Firewall service ISA Server Web filter 255 One of the services resumed logging following a previous failure. {55d1d498-c50a-405d-a54f-e56c41d908f0} 0 Logging Resumed 1 255 The size of the free non-paged pool fell below the system-defined minimum. {8230a26d-3793-44a4-96a4-1b4884d1881e} Low Non-Paged Pool 1 255 The size of the free non-paged pool exceeded the system-defined minimum. {effef1b7-01e5-4ccb-adf4-7a5b7ab8c39e} Low Non-Paged Pool Recovered 1 255 An alert definition contains an invalid property. {BD8F8E89-6070-4e0d-905B-36FE10D83243} Misconfigured Alert 1 Any network configuration change NIC Enabled NIC Disabled IP added or removed Network connected Network disconnected network addresses modified 255 A network configuration change that affects ISA Server was detected. {6716fcc9-a334-4109-8882-20e7fd4642c0} 0 Network Configuration Changed 1 255 Failed to configure Network Load Balancing to work with ISA Server. {E985D272-B3C1-48DE-9DDF-3AABFF1EBE4D} 0 NLB configuration Failure 1 255 Failed to create a network socket because there are no available ports {f3d6eb95-8fac-40b2-882f-1fe01ed1e53e} 0 No Available Ports 1 255 ISA Server failed to establish connection to the requested server. {C1CBA02C-0655-4711-8AFE-900374863FD3} 0 No Connectivity 1 Any operating system component conflict IPNAT conflict IP Routing conflict ICS conflict RRAS conflict 255 There is a conflict with one of the operating system components: IPNAT, ICS, or RRAS. {3230b7db-ebd9-4312-b01d-8663eca36c42} 0 Operating System Component Conflict 1 255 ISA Server dropped a UDP packet because it exceeded the maximum UDP packet size, as specified in the registry key. {54431b8a-c1c4-4aac-85bb-10970211e796} 0 Oversize UDP Packet 1 255 The percentage of threads used for pending DNS requests out of the total number of available threads exceeded the system-defined maximum. {9E73799E-48FC-41D3-BE09-F8903FE3ED16} Pending DNS Requests Resource Usage Limit Exceeded 1 255 The percentage of threads used for pending DNS requests out of the total number of available threads is back below the system-defined maximum, and connections that require DNS name resolution can be accepted. {e61333c0-ecc2-4594-b542-907085c54a92} Pending DNS Requests Resource Usage Limit within Limits 1 Any component Concurrent TCP Connections from One IP Address Limit Exceeded Non-TCP Sessions from One IP Address Limit Exceeded TCP Connections per Minute from One IP Address Limit Exceeded Denied Connections per Minute from One IP Address Limit Exceeded HTTP Requests from One IP Address Limit Exceeded 255 A specific client host exceeded one of the per-client network traffic limits {C2D18E2B-70C3-4125-BC6C-ED5D87BFEAE1} Per-client network traffic limit 1 255 Detects POP buffer overflow. {016586D5-19F8-4c7f-B813-70DFB4EEB558} POP Intrusion 1 255 A certificate on a server published by ISA Server certificate is nearing its expiration date. {cf370f34-86c5-4cf1-b3c3-9c9104e8b594} Published server certificate expiration warning 1 255 ISA Server was unable to resolve the name of a published Web server, all requests that use the Web publishing rule will be denied. {A05CB1EF-D88D-4055-9C0B-EB8657B68279} Published Web Server Name Not Resolvable 1 Quarantined user changed state Quarantined user was disconnected Quarantined user cleared quarantine 255 A user was removed from Quarantined VPN Clients network. {F33A3C66-D670-4f9d-ACF2-99A516F6EB3B} 0 Quarantined VPN Clients Network Changes 1 255 The connection to the RADIUS server was restored. {3E59FB99-C836-4E25-8ADD-2871EF32CF9E} RADIUS Server Recovered 1 255 The RADIUS server requested did not respond. {314DE898-0294-44DB-827C-595C486BE77F} RADIUS Server Unavailable 1 255 An error occurred while generating a report summary from the log files {108A3523-9F16-4c8a-8F6B-AEC19A993FD7} 0 Report Summary Generation Failure 1 255 A resource allocation failure has occurred. For example, insufficient memory resources. {FFFF8EA6-94EC-11D2-AF53-00E02C069419} Resource Allocation Failure 1 255 The ISA Server failed to route the request to an upstream or member server. {FFFF8E98-94EC-11D2-AF53-00E02C069419} 10 0 Routing (chaining) Failure 1 255 The ISA Server resumed routing to the upstream server. {FFFF8EA5-94EC-11D2-AF53-00E02C069419} 10 0 Routing (chaining) Recovery 1 255 RPC Filter cannot use the defined port because it is already in use. {537E6008-6AA1-45EB-91EB-E2A5C7EF6411} 0 RPC Filter - Bind failure 1 Any Disconnected Reconnected 255 The connectivity to the publishing RPC service changed {B9528326-C74F-4C93-83A8-EBD2D1116CDD} 0 RPC Filter - connectivity changed 0 Any failure Incorrect rule configuration Rule cannot be applied 50 The server publishing rule cannot be applied. {318FEF1C-3E0D-4395-AFCF-043F842A12E2} 0 Server Publishing Failure 1 50 The server publishing rule can now be applied. {B1BC099A-1FA5-4E3C-BB1F-B0D09C2BEE46} 0 Server Publishing Recovery 1 Any ISA Server service ISA Server control service ISA Server Firewall service ISA Server Job Scheduler service 255 The service failed to initialize. {28753A89-9F4F-4479-8247-01D6C52FE864} 0 Service Initialization failure 1 Any ISA Server service ISA Server Firewall service ISA Server Job Scheduler service 255 A ISA Server service terminated or stopped functioning unexpectedly. {45190A4B-DD90-41CA-9B93-5CFD8FBC9949} 0 Service not responding 1 Any ISA Server service ISA Server control service ISA Server Firewall service ISA Server Job Scheduler service 255 The service was stopped gracefully. {FFFF8E99-94EC-11D2-AF53-00E02C069419} 0 Service Shutdown 1 Any ISA Server service ISA Server control service ISA Server Firewall service ISA Server Job Scheduler service 255 Service started. {FFFF8EA2-94EC-11D2-AF53-00E02C069419} Service Started 1 255 ISA Server encountered slow connection to the requested server. {04F670F4-4F3E-4C48-BF8C-8F8176AEC087} 0 Slow Connectivity 1 Any SMTP command violation Bare CR or LF terminator Invalid DATA termination 255 SMTP Filter event {179A0A70-1EF5-11D3-B160-00A0C9E3F998} SMTP Filter event 1 255 The port specified in SOCKS properties is in use by another protocol. {D601AEA1-7DB9-4110-8FB9-E821D53DA1B1} 0 SOCKS configuration failure 1 255 ISA Server could not establish an SSL connection with the published server because the name on the published server’s certificate does not match the name of the published server {a0987424-62db-63bf-af02-995abb69d3c1} SSL connection establishment failure with published server (name mismatch) 1 255 ISA Server could not establish an SSL connection with the published server because it does not trust the issuer of the published server’s certificate. {a0987424-62db-73cf-af02-995abb69d3c1} SSL connection establishment failure with published server (no trust) 1 255 ISA Server could not establish an SSL connection with the published server because the published server’s certificate has expired or is not yet valid. {a0987424-62db-93ef-af02-995abb69d3c1} SSL connection establishment failure with published server (server certificate not valid) 1 255 ISA Server encountered an unknown failure when attempting to establish an SSL connection with the published server. {a0987424-62db-83df-af02-995abb69d3c1} SSL connection establishment failure with published server (unknown reason) 1 255 ISA Server detected a SYN attack. {e18e7b79-16b9-459c-b575-7c5e25e7f282} SYN Attack 1 255 The response was rejected because a compressed response was not requested. ISA Server blocks compressed HTTP responses when it does not request compression {cb1a3322-f0fe-8e8e-bb56-67f4427f3963} The response was rejected because a compressed response was not requested. 1 255 An unregistered event occurred. {FFFF8EA3-94EC-11D2-AF53-00E02C069419} 0 Unregistered Event 1 255 A remote gateway address specified for a VPN site-to-site network cannot be resolved. As a result, a VPN connection cannot be established to the remote network. In addition, if the network used for the VPN connection from the remote server is enabled for NLB, VPN traffic may be picked up by the wrong array member, and not by the intended server. {AACA939C-0672-49CE-96AD-AF973585EE30} 0 Unresolvable remote gateway address on a VPN Network 1 255 Server name cannot be resolved to IP address {82C2F3D9-92AD-4070-A5A8-65DB6342DAAE} Unresolvable Server Name 1 16 Upstream chaining credentials are invalid. {FFFF8E9F-94EC-11D2-AF53-00E02C069419} 10 0 Upstream Chaining Credentials 1 255 VPN client connection attempt failed. {29C46FF7-05A2-4C84-8F67-A42D22AE7837} 0 VPN Connection Failure 1 255 A Web publishing rule stopped forwarding requests to a Web farm because there are currently no servers in the Web farm that can accept requests. {7D3BF023-6458-401b-B40B-8777645DBB51} 30 Web Farm Servers Unavailable 1 255 The Web filter was not registered on this server. {3FEB4EC3-F579-4101-8405-68D0FCB5DF45} 0 Web Filter Not Registered. 1 text/* image/* application/x-javascript application/x-shockwave-flash Bandwidth Splitter's default HTTP Boost content group [BS] HTTP Boost application/hta application/x-internet-signup application/x-pkcs7-certificates application/x-sv4crc application/octet-stream application/x-pkcs7-certreqresp application/pkcs7-signature application/x-cpio application/set-registration-initiation application/x-dvi application/pkcs7-mime application/x-csh application/x-iphone .hta .isp .spc .sv4crc .bin .p7r .evy .p7s .cpio .setreg .dvi .p7b .p7c .csh .iii .man application/x-troff-man .hdf application/x-hdf .mvb application/x-msmediaview .texi application/x-texinfo .setpay application/set-payment-initiation .stl application/vndms-pkistl .ins .oda application/oda .nc application/x-netcdf .sh application/x-sh .shar application/x-shar .tcl application/x-tcl .ms application/x-troff-ms .ods application/oleobject .axs application/olescript .dir application/x-director .sit application/x-stuffit .crl application/pkix-crl .pub application/x-mspublisher .spl application/futuresplash .hqx application/mac-binhex40 .p10 application/pkcs10 .dxr .vbs .js application/x-javascript .m13 .me application/x-troff-me .latex application/x-latex .m14 .cer application/x-x509-ca-cert .p12 application/x-pkcs12 .pfx .der .texinfo .p7m .dcr .sct text/scriptlet .fif application/fractals .exe .sst application/vndms-pkicertstore .pko application/vndms-pkipko .scd application/x-msschedule .bcpio application/x-bcpio .dll application/x-msdownload .roff application/x-troff .t .prf application/pics-rules .tr .src application/x-wais-source .acx application/internet-property-stream .cat application/vndms-pkiseccat .cdf application/x-cdf .sv4cpio application/x-sv4cpio .tex application/x-tex .ustar application/x-ustar .crt Predefined content type used to control access to content containing applications, such as executables, dynamically loaded libraries (DLL), ole and .vbs files. Application 1 application/x-mscardfile application/x-perfmon application/x-msclip application/x-msmoney application/winhlp application/x-mswrite application/x-msterminal application/x-msmetafile .crd .clp .hlp .mny .pma .pmc .pml .pmr .pmw .trm .wmf .wri Predefined content type used to control access to content containing data for applications, such as perfmon, help and .wmf. Application Data Files 1 audio/* .ra .ram .rmi .au .snd .aif .aifc .wav .m3u .mid .mp3 Predefined content type used to control access to content containing audio files, such as MP3 and WAV files. Audio 1 application/x-gzip application/x-tar application/x-gtar application/x-compress application/x-compressed application/x-zip-compressed .gtar .gz .tar .tgz .z .zip Predefined content type used to control access to content including compressed files, such as .z and .zip files. Compressed Files 1 text/tab-separated-values text/xml text/h323 application/postscript application/pdf .ai .323 .eps .pdf .ps .tsv .xml Predefined content type used to control access to documents, such as [GB] text, Adobe PDF and XML documents. Documents 1 text/css text/webviewhtml text/html .htm .html .htt .stm .xsl Predefined content type used to control access to content containing HTML documents, such as .xsl and .htm files. HTML Documents 1 .cod .cmx .ief .pbm .pnm .ppm .gif .bmp .jfif .jpe .jpg .jpeg .ico .pgm .ras .rgb .dib .tif .xbm .xpm .xwd image/* Predefined content type used to control access to content containing images, such as Windows Bitmap, JPEG and GIF files. Images 1 application/msword application/vnd.ms-excel application/x-msaccess application/vnd.ms-project application/vnd.ms-powerpoint application/vnd.ms-works application/rtf .doc .dot .mpp .mdb .pot .pps .ppt .wcm .wdb .wks .xla .xlc .xls .xlt .xlm .xlw Predefined content type used to control access to documents that may contain macros, such as MS Office Word and Excel. Macro Documents 1 .txt .h .c .htc .vcf .etx .uls .css .bas .rtx text/plain text/x-component text/x-vcard text/x-setext Predefined content type used to control access to content containing text files, such as .txt and plain text. Text 1 video/* .asf .asr .asx .avi .ivf .lsf .lsx .mov .movie .mlv .mp2 .mpa .mpe .mpg .mpeg .mpv2 .qt Predefined content type used to control access to content containing video files, such as AVI, Quick Time and MPEG files. Video 1 x-world/x-vrml .flr .wrl .wrz .xaf .xof Predefined content type used to control access to content containing VRML files, such as .flr and .wrl. VRML 1 Predefined user set representing all authenticated users. A rule defined using this set will apply to authenticated users. Note that SecureNAT clients are not authenticated. All Authenticated Users 1 all user S-1-5-21-3343868531-448861825-3348544819-1609 S-1-5-21-3343868531-448861825-3348544819-1166 S-1-5-21-3343868531-448861825-3348544819-1205 S-1-5-21-3343868531-448861825-3348544819-1635 S-1-5-21-3343868531-448861825-3348544819-1228 S-1-5-21-3343868531-448861825-3348544819-1214 S-1-5-21-3343868531-448861825-3348544819-1619 S-1-5-21-3343868531-448861825-3348544819-1340 S-1-5-21-3343868531-448861825-3348544819-1279 S-1-5-21-3343868531-448861825-3348544819-1374 S-1-5-21-3343868531-448861825-3348544819-1160 S-1-5-21-3343868531-448861825-3348544819-1421 S-1-5-21-3343868531-448861825-3348544819-1430 S-1-5-21-3343868531-448861825-3348544819-1256 S-1-5-21-3343868531-448861825-3348544819-1367 S-1-5-21-3343868531-448861825-3348544819-1230 S-1-5-21-3343868531-448861825-3348544819-1412 S-1-5-21-3343868531-448861825-3348544819-1521 S-1-5-21-3343868531-448861825-3348544819-1624 S-1-5-21-3343868531-448861825-3348544819-1254 S-1-5-21-3343868531-448861825-3348544819-1385 S-1-5-21-3343868531-448861825-3348544819-1227 S-1-5-21-3343868531-448861825-3348544819-1151 S-1-5-21-3343868531-448861825-3348544819-1190 S-1-5-21-3343868531-448861825-3348544819-1258 S-1-5-21-3343868531-448861825-3348544819-1260 S-1-5-21-3343868531-448861825-3348544819-1364 S-1-5-21-3343868531-448861825-3348544819-1293 S-1-5-21-3343868531-448861825-3348544819-1588 S-1-5-21-3343868531-448861825-3348544819-1198 S-1-5-21-3343868531-448861825-3348544819-1153 Predefined user set representing all users. A rule defined using this set will apply to all users, both authenticated and unauthenticated. All Users 1 it S-1-5-21-3343868531-448861825-3348544819-500 S-1-5-21-3343868531-448861825-3348544819-1408 S-1-5-21-3343868531-448861825-3348544819-1525 S-1-5-21-3343868531-448861825-3348544819-1210 S-1-5-21-3343868531-448861825-3348544819-1307 S-1-5-21-3343868531-448861825-3348544819-1634 S-1-5-21-3343868531-448861825-3348544819-1442 majdi S-1-5-21-3343868531-448861825-3348544819-1638 manager S-1-5-21-3343868531-448861825-3348544819-1225 S-1-5-21-3343868531-448861825-3348544819-1186 S-1-5-21-3343868531-448861825-3348544819-1567 S-1-5-21-3343868531-448861825-3348544819-1216 S-1-5-21-3343868531-448861825-3348544819-1344 S-1-5-21-3343868531-448861825-3348544819-1389 S-1-5-21-3343868531-448861825-3348544819-1475 S-1-5-21-3343868531-448861825-3348544819-1396 S-1-5-21-3343868531-448861825-3348544819-1432 S-1-5-21-3343868531-448861825-3348544819-1194 S-1-5-21-3343868531-448861825-3348544819-1570 S-1-5-21-3343868531-448861825-3348544819-1357 S-1-5-21-3343868531-448861825-3348544819-1276 S-1-5-21-3343868531-448861825-3348544819-1637 S-1-5-21-3343868531-448861825-3348544819-1592 S-1-5-21-3343868531-448861825-3348544819-1636 5 net users S-1-5-21-3343868531-448861825-3348544819-1450 S-1-5-21-3343868531-448861825-3348544819-1249 S-1-5-21-3343868531-448861825-3348544819-1594 S-1-5-21-3343868531-448861825-3348544819-1301 S-1-5-21-3343868531-448861825-3348544819-1604 S-1-5-21-3343868531-448861825-3348544819-1221 S-1-5-21-3343868531-448861825-3348544819-1355 S-1-5-21-3343868531-448861825-3348544819-1650 S-1-5-21-3343868531-448861825-3348544819-1645 1 Predefined user set representing the Local System service and the Network service on the ISA Server computer. System and Network Service 1 S-1-5-20 4 S-1-5-18 4 Enables forms-based (cookie) authentication using Active Directory FBA with AD 1 2 Microsoft (R) Corporation 4.0 Enables forms-based (cookie) authentication using LDAP servers FBA with LDAP 1 2 Microsoft (R) Corporation 4.0 Enables forms-based (cookie) authentication using a RADIUS server FBA with RADIUS 1 2 Microsoft (R) Corporation 4.0 Enables forms-based (cookie) authentication using a RADIUS OTP server FBA with RADIUS OTP 1 2 Microsoft (R) Corporation 4.0 Authenticates a user using the LDAP protocol LDAP 1 3 Microsoft (R) Corporation 4.0 Authenticates users using the RADIUS protocol. RADIUS 1 3 3 Enables forms-based (cookie) authentication using RSA SecurID SecurID 1 3 Microsoft (R) Corporation 4.0 1 2 0000000000000000 *Blazer* 1 1 0100000000000000 *DoCoMo* 1 2 0200000000000000 *Windows CE* 1 2 0300000000000000 *Symbain OS* 1 2 0400000000000000 *SonyEricsson* 1 3 0500000000000000 *Frontpage* 1 0 0600000000000000 *Mozilla* 1 0 0700000000000000 *Opera* 1 3 0800000000000000 *MSRPC* 1 3 0900000000000000 * -1 3 255 The action associated with this alert failed. 1 {FFFF8EA4-94EC-11D2-AF53-00E02C069419} 0 Alert action failure 1 'LogEvent' -1 1 255 The application filter was not registered on this server. 1 {62B91127-F0EA-4bdf-9117-818887D6A435} 0 Application Filter Not Registered. 1 'LogEvent' -1 1 1 4 The cache container initialization failed and the initialization was ignored. 1 {1FE2A7A6-C8D0-4318-A9EC-B9C50C83BC1C} 0 Cache Container Initialization Error 1 'LogEvent' 0 1 2 4 Recovery of a single cache container was completed. 1 {05D1B873-DE91-4d43-96A6-97D1D8613143} 0 Cache Container Recovery Complete 1 'LogEvent' -1 1 1 4 The operation to reduce the size of the cache file failed. 1 {BCB08CF0-1EF9-4daa-8D16-3DC6A9217CF1} 0 Cache File Resize Failure 1 'LogEvent' -1 1 1 4 The Web cache proxy was disabled because of a global failure. 1 {C4433C88-106C-4d2c-8810-370549D79855} 0 Cache Initialization Failure 1 'LogEvent' -1 1 1 255 ISA Server failed to initialize the cache because the Network Services account does not have sufficient permissions for the root folder and the Urlcache folder on one or more cache drives. The Network Services account must have the List Folder and Read permissions for the root folder and the Read permission for the Urlcache folder to open the Urlcache folder on every cache drive. Verify that the Network Services account has at least the List Folder and Read permissions for the root folder and the Read permission for the Urlcache folder on all cache drives. 1 {a86bb1e7-c931-11da-a861-0014222a9435} 0 Cache Permissions Insufficient 1 'LogEvent' 0 1 2 4 The cache content restoration was completed. 1 {AA1CF1A4-FCC2-45ce-9F01-6D56D69E680B} 0 Cache Restoration Completed 1 'LogEvent' -1 1 1 4 There was a failure in writing content to the cache. 1 {D1005BF7-4927-48d9-BF34-823EA2054326} 0 Cache Write Error 1 'LogEvent' -1 1 2 4 During cache recovery, an object with conflicting information was detected. The conflicting object was discarded. 0 {E207320E-59B2-4b55-8600-471553A60DCB} 0 Cached Object Discarded 1 'LogEvent' -1 3 1 255 An ISA Server certificate is nearing its expiration date. 1 {a0987424-62db-53af-af02-995abb69d3c1} Certificate on ISA Server about to expire 1 'LogEvent' -1 3 255 There was a problem with a certificate used by ISA Server to establish an SSL connection with a client. 1 {a0987424-62db-439f-af02-995abb69d3c1} Certificate on ISA Server invalid 1 'LogEvent' -1 3 1 255 One or more code pages are invalid, or the applicable conversion tables are not installed. 1 {39B0FE76-E6DE-4944-997B-E2D04661A583} 0 Code Page Invalid 1 'LogEvent' 0 3 1 255 Failed to load an extension component. 1 {FFFF8E95-94EC-11D2-AF53-00E02C069419} 0 Component load failure 1 'LogEvent' -1 4 1 -1 A response compressed by an unsupported method (indicated in the HTTP Content-Encoding header) was recieved. ISA Server supports only gzip compression. 1 {cb1a3322-f0fe-6c4c-bb56-67f4427f3963} Compression by Unsupported Method 1 'LogEvent' -1 4 1 -1 ISA Server failed to compress the content of a response. 1 {cb1a3322-f0fe-5b3b-bb56-67f4427f3963} 5 Compression Failure 1 'LogEvent' -1 4 1 -1 The Compression Filter cannot handle a response because the memory allocated for compression is fully utilized. 1 {cb1a3322-f0fe-9f9f-bb56-67f4427f3963} 5 Compression Failure (Allocated Memory Exhausted) 1 'LogEvent' -1 4 1 -1 ISA Server was unable to decompress the content of a response. 1 {cb1a3322-f0fe-4a2a-bb56-67f4427f3963} 5 Compression Failure (Decompression Failed) 1 'LogEvent' -1 4 1 -1 The compression filters are misconfigured. Both filters must be in the same state, either enabled or disabled. 1 {cb1a3322-f0fe-7d5d-bb56-67f4427f3963} 5 Compression Failure (Filter Misconfiguration) 1 'LogEvent' 1 3 255 The number of concurrent TCP connections allowed from one IP address was exceeded. 1 {C2D18E2B-70C3-4125-BC6C-ED5D87BFEAE1} Concurrent TCP Connections from One IP Address Limit Exceeded 1 'LogEvent' -1 3 1 255 An error occurred while reading configuration information. 1 {FFFF8E93-94EC-11D2-AF53-00E02C069419} 0 Configuration error 1 'LogEvent' -1 1 255 An IP address exceeded its connection limit 1 {A0F22A40-04D6-4509-BCB7-21C22A09E294} Connection Limit Exceeded 1 'LogEvent' -1 1 255 The number of connections per second allowed for a rule was exceeded. See the help for more information on connection limits. 1 {87B76595-0CD5-4EF4-A3A1-9E458FD210FD} Connection Limit for a Rule was Exceeded 1 'LogEvent' -1 3 255 ISA Server tried to delegate credentials, but the published Web site rejected the credentials. 1 {8DE12CB2-D43B-4b95-B03A-F41AFE072CAB} Credentials Delegation Failure 1 'LogEvent' -1 3 255 ISA Server failed to delegate credentials using Kerberos constrained delegation to a published Web site. 1 {21D31CCE-B84C-4448-BBAF-69043D9DEB09} Credentials Delegation Using Kerberos Constrained Delegation Failure 1 'LogEvent' 4 3 255 The number of denied connections per minute allowed from one IP address was exceeded. 1 {C2D18E2B-70C3-4125-BC6C-ED5D87BFEAE1} Denied Connections per Minute from One IP Address Limit Exceeded 1 'LogEvent' -1 1 255 The DHCP anti-poisoning intrusion detection mechanism was disabled. 1 {9E34B2AE-0243-45B5-B35E-470DB941911D} DHCP Anti-Poisoning Intrusion Detection Disabled 1 'LogEvent' -1 3 2 255 Failed to create a dial-on-demand connection, either because there is no answer or the line is busy. 1 {FFFF8E9D-94EC-11D2-AF53-00E02C069419} 0 Dial-on-demand failure 1 'LogEvent' 0 1 255 A host name overflow, length overflow or zone transfer attack occurred. 1 {FB07D159-5744-4d63-B05D-0BAF93B059E3} DNS Intrusion 1 'LogEvent' 3 2 255 A zone transfer attack occurred. 1 {FB07D159-5744-4d63-B05D-0BAF93B059E3} 5 DNS Zone Transfer Intrusion 1 'LogEvent' -1 3 1 255 An attempt to log the event information to the system event log failed. 0 {FFFF8E92-94EC-11D2-AF53-00E02C069419} Event Log Failure 1 'LogEvent' Net send localhost event log failure 1 -1 3 1 255 There is a failure in communication between the Firewall client and the ISA Server service. 1 {FFFF8EA7-94EC-11D2-AF53-00E02C069419} 0 Firewall Communication Failure 1 'LogEvent' 2 3 1 255 Log storage free disk space limit was exceeded. 1 {77187CDA-B3AD-4A5B-A99A-E9375B90174C} 0 Free Disk Space Limit Exceeded 1 'LogEvent' -1 3 1 255 The FTP filter failed to parse the allowed ftp commands. Verify that the commands are stored in the correct format. Each command should be no more than 4 characters long and each command should be seperated from the previous one with a space character. 1 {7CFAC8D5-0610-493a-8815-07788161970D} 0 FTP Filter Initialization Warning 1 'LogEvent' -1 3 255 The number of denied TCP and non-TCP packets per second exceeded the allowed limit 1 {7310dada-656e-4e06-be15-bc2e5d40261c} Global denied packets rate limit 1 'LogEvent' 5 3 255 The number of HTTP requests per minute from one IP address exceeded the configured limit. 1 {C2D18E2B-70C3-4125-BC6C-ED5D87BFEAE1} HTTP Requests from One IP Address Limit Exceeded 1 'LogEvent' 0 1 255 An intrusion was attempted by an external user. 1 {bebe6638-ac58-44f5-a39c-71ea4bb558af} 1 Intrusion Detected 1 'LogEvent' -1 3 4 Client certificate was revoked due to invalid or missing Certificate Revocation List (CRL). The CRL may have expired and ISA Server was unable to download a valid CRL. Verify that the CRL download system policy configuration group is enabled and that there is connectivity to the CRL Distribution Points (CDPs). 1 {9c2267b1-aff9-4557-8836-cfe9eae1411e} Invalid CRL Found 1 'LogEvent' -1 1 255 The DHCP offer IP address is not valid. 1 {ec9aacee-a429-4ad6-93ef-b5342c085700} Invalid DHCP offer 1 'LogEvent' -1 3 1 255 The dial-on-demand credentials provided are invalid. 1 {FFFF8EA0-94EC-11D2-AF53-00E02C069419} 0 Invalid dial-on-demand credentials 1 'LogEvent' -1 5 1 255 A network adapter is configured with several IP addresses which belong to several networks. This is not a valid configuration. 1 {E94EA941-9CC6-44ab-A628-8F4037924EBA} 0 Invalid network adapter configuration 1 'LogEvent' -1 1 255 The IP packet source address is not valid. 1 {1e1cc2df-61f6-49a6-96f5-c663d2c8a066} 5 IP Spoofing 1 'LogEvent' -1 3 1 255 Changes made to the configuration will only take effect after restarting the computer. 1 {CE368F95-9F52-4B31-8F8C-6DB2D7003084} 0 ISA Server Computer Restart Is Required 1 'LogEvent' -1 3 2 255 The connection to the LDAP server was restored. 1 {7C020B78-B8A8-442C-B61B-666C3208A4A5} 0 LDAP Server Recovered 1 'LogEvent' -1 3 1 255 The LDAP server requested did not respond. 1 {D763C50D-B281-44C2-92F4-4962EE02A78E} 0 LDAP Server Unavailable 1 'LogEvent' -1 3 1 255 The Web listener used in a Web Publishing rule specifies HTTP connections to the clients, but the rule specifies an HTTPS connection to the published server or web farm. HTTPS links will be translated to HTTP links. 1 {B1BBD7A9-7367-47f2-AB52-EE4B33669EE9} 0 Link Translation Configuration Insecure 1 'LogEvent' -1 3 1 255 One or more link translation mappings are invalid. Link translation mappings must be between 4 and 2057 bytes. The invalid mappings will be ignored. 1 {3CCFE8F5-49EB-4945-BEAF-94568037FA37} 0 Link Translation Configuration Invalid 1 'LogEvent' -1 3 1 255 The URL of a site specified in the list of unpublished sites for link translation redirection contains one or more non-ANSI characters. 1 {A9B94F4D-17F2-46e4-8B2B-2BB9D471D226} 0 Link Translation Redirection Unpublished Site Contains Invalid Character 1 'LogEvent' -1 3 1 255 The length of the URL for a site specified in the list of unpublished sites for link translation redirection is invalid. 1 {EF8CACB2-9D5A-497f-8952-2FC2029100DD} 0 Link Translation Redirection Unpublished Site Length Invalid 1 'LogEvent' -1 3 255 Log deletion according to the configuration failed. 1 {915F3E34-5954-4ff1-B12F-58E4313876EB} Log Deletion Failure 1 'LogEvent' 0 3 255 One of the service logs failed. 1 {C53667EF-78AE-4C73-B625-0409959D5321} 5 Log Failure 1 'LogEvent' 1 'StopServices' fwsrv 3 0 3 1 255 One or more of the log storage limits was reached. 1 {77187CDA-B3AD-4A5B-A99A-E9375B90174C} Log Storage Limits 1 'LogEvent' 0 3 2 255 One of the services resumed logging following a previous failure. 1 {55d1d498-c50a-405d-a54f-e56c41d908f0} 0 Logging Resumed 1 'LogEvent' -1 3 255 The size of the free non-paged pool fell below the system-defined minimum. 1 {8230a26d-3793-44a4-96a4-1b4884d1881e} 0 Low Non-Paged Pool 1 'LogEvent' -1 3 2 255 The size of the free non-paged pool exceeded the system-defined minimum. 1 {effef1b7-01e5-4ccb-adf4-7a5b7ab8c39e} 0 Low Non-Paged Pool Recovered 1 'LogEvent' -1 3 1 255 An alert definition contains an invalid property. 1 {BD8F8E89-6070-4e0d-905B-36FE10D83243} Misconfigured Alert 1 'LogEvent' 0 3 2 255 A network configuration change that affects ISA Server was detected. 0 {6716fcc9-a334-4109-8882-20e7fd4642c0} 0 Network configuration changed 1 'LogEvent' -1 5 255 Failed to configure Network Load Balancing to work with ISA Server. 1 {E985D272-B3C1-48DE-9DDF-3AABFF1EBE4D} 0 NLB configuration Failure 1 'LogEvent' -1 3 1 255 Failed to create a network socket because there are no available ports 1 {f3d6eb95-8fac-40b2-882f-1fe01ed1e53e} No Available Ports 1 'LogEvent' -1 3 255 ISA Server failed to establish a connection to the requested server. 1 {C1CBA02C-0655-4711-8AFE-900374863FD3} 0 No Connectivity 1 'LogEvent' 2 3 255 The number of non-TCP sessions allowed from one IP address was exceeded. 1 {C2D18E2B-70C3-4125-BC6C-ED5D87BFEAE1} Non-TCP Sessions from One IP Address Limit Exceeded 1 'LogEvent' 0 3 255 There is a conflict with one of the operating system components: IPNAT, ICS, or RRAS. 1 {3230b7db-ebd9-4312-b01d-8663eca36c42} 0 OS component conflict 1 'LogEvent' -1 1 255 ISA Server dropped a UDP packet because it exceeded the maximum UDP packet size, as specified in the registry key. 1 {54431b8a-c1c4-4aac-85bb-10970211e796} Oversized UDP Packet 1 'LogEvent' -1 3 255 The percentage of threads used for pending DNS requests out of the total number of available threads exceeded the system-defined maximum. 1 {9E73799E-48FC-41D3-BE09-F8903FE3ED16} 0 Pending DNS Requests Resource Usage Limit Exceeded 1 'LogEvent' -1 3 2 255 The percentage of threads used for pending DNS requests out of the total number of available threads is back below the system-defined maximum, and connections that require DNS name resolution can be accepted. 1 {e61333c0-ecc2-4594-b542-907085c54a92} 0 Pending DNS Requests Resource Usage Limit within Limits 1 'LogEvent' -1 1 255 POP buffer overflow detected. 1 {016586D5-19F8-4c7f-B813-70DFB4EEB558} POP Intrusion 1 'LogEvent' -1 3 1 255 A certificate on a server published by ISA Server certificate is nearing its expiration date. 1 {cf370f34-86c5-4cf1-b3c3-9c9104e8b594} Published server certificate expiration warning 1 'LogEvent' -1 3 255 ISA Server was unable to resolve the name of a published Web server, all requests that use the Web publishing rule will be denied. 1 {A05CB1EF-D88D-4055-9C0B-EB8657B68279} Published Web Server Name Not Resolvable 1 'LogEvent' 0 3 2 255 A user was removed from Quarantined VPN Clients network. 0 {F33A3C66-D670-4f9d-ACF2-99A516F6EB3B} 0 Quarantined VPN Clients Network Changes 1 'LogEvent' -1 3 2 255 The connection to the RADIUS server was restored. 1 {3E59FB99-C836-4E25-8ADD-2871EF32CF9E} RADIUS Server Recovered 1 'LogEvent' -1 3 1 255 The RADIUS server requested did not respond. 1 {314DE898-0294-44DB-827C-595C486BE77F} RADIUS Server Unavailable 1 'LogEvent' -1 3 255 An error occurred while generating a report summary from the log files 1 {108A3523-9F16-4c8a-8F6B-AEC19A993FD7} 0 Report Summary Generation Failure 1 'LogEvent' -1 3 255 A resource allocation failure has occurred. For example, insufficient memory resources. 1 {FFFF8EA6-94EC-11D2-AF53-00E02C069419} 0 Resource Allocation Failure 1 'LogEvent' -1 2 1 255 ISA Server failed to route the request to an upstream server. 1 {FFFF8E98-94EC-11D2-AF53-00E02C069419} 0 Routing (chaining) failure 1 'LogEvent' -1 2 2 255 The ISA Server resumed routing to an upstream server. 1 {FFFF8EA5-94EC-11D2-AF53-00E02C069419} 0 Routing (chaining) recovery 1 'LogEvent' -1 3 255 RPC Filter cannot use the defined port because it is already in use. 1 {537E6008-6AA1-45EB-91EB-E2A5C7EF6411} 0 RPC Filter - Bind failure 1 'LogEvent' 0 3 255 The connectivity to the publishing RPC service changed 1 {B9528326-C74F-4C93-83A8-EBD2D1116CDD} 0 RPC Filter - connectivity changed 1 'LogEvent' 1 3 255 The server publishing rule is configured incorrectly. 1 {318FEF1C-3E0D-4395-AFCF-043F842A12E2} 0 Server Publishing Failure 1 'LogEvent' 2 3 2 255 The server publishing rule cannot be applied. 0 {318FEF1C-3E0D-4395-AFCF-043F842A12E2} 0 Server publishing is not applicable. 1 'LogEvent' -1 3 2 255 The server publishing rule can now be applied. 1 {B1BC099A-1FA5-4E3C-BB1F-B0D09C2BEE46} 0 Server Publishing Recovery 1 'LogEvent' 0 3 255 The service failed to initialize. 1 {28753A89-9F4F-4479-8247-01D6C52FE864} 0 Service Initialization failure 1 'LogEvent' 0 3 255 A ISA Server service terminated or stopped functioning unexpectedly. 1 {45190A4B-DD90-41CA-9B93-5CFD8FBC9949} 0 Service not responding 1 'LogEvent' 0 3 2 255 The service was stopped gracefully. 1 {FFFF8E99-94EC-11D2-AF53-00E02C069419} 0 Service Shutdown 1 'LogEvent' 0 3 2 255 Service started. 1 {FFFF8EA2-94EC-11D2-AF53-00E02C069419} 0 Service Started 1 'LogEvent' -1 3 1 255 ISA Server encountered a slow connection to the requested server. 1 {04F670F4-4F3E-4C48-BF8C-8F8176AEC087} 0 Slow Connectivity 1 'LogEvent' 2 3 1 255 Bare CR or LF may pose a security risk. The connection has been terminated 1 {179A0A70-1EF5-11D3-B160-00A0C9E3F998} SMTP filter encountered an invalid bare CR or LF 1 'LogEvent' 3 3 1 255 Some character combinations in DATA may pose a security risk. The connection has been terminated 1 {179A0A70-1EF5-11D3-B160-00A0C9E3F998} SMTP filter encountered an invalid DATA terminator 1 'LogEvent' 0 3 2 255 An SMTP command rule was violated 0 {179A0A70-1EF5-11D3-B160-00A0C9E3F998} 0 SMTP Filter event 1 'LogEvent' -1 3 255 The port specified in SOCKS properties is in use by another protocol. 1 {D601AEA1-7DB9-4110-8FB9-E821D53DA1B1} 0 SOCKS configuration failure 1 'LogEvent' -1 3 255 ISA Server failed to establish an SSL connection with a published server. 1 {a0987424-62db-63bf-af02-995abb69d3c1} SSL connection failure with published server (name mismatch) 1 'LogEvent' -1 3 255 ISA Server failed to establish an SSL connection with a published server. 1 {a0987424-62db-73cf-af02-995abb69d3c1} SSL connection failure with published server (no trust) 1 'LogEvent' -1 3 255 ISA Server failed to establish an SSL connection with a published server. 1 {a0987424-62db-93ef-af02-995abb69d3c1} SSL connection failure with published server (server certificate not valid) 1 'LogEvent' -1 3 255 ISA Server failed to establish an SSL connection with a published server. 1 {a0987424-62db-83df-af02-995abb69d3c1} SSL connection failure with published server (unknown reason) 1 'LogEvent' -1 1 255 ISA Server detected a SYN attack. 1 {e18e7b79-16b9-459c-b575-7c5e25e7f282} 0 SYN Attack 1 'LogEvent' 3 3 255 The number of TCP connections per minute allowed from one IP address was exceeded. 1 {C2D18E2B-70C3-4125-BC6C-ED5D87BFEAE1} TCP Connections per Minute from One IP Address Limit Exceeded 1 'LogEvent' -1 4 1 -1 The response was rejected because a compressed response was not requested. ISA Server blocks compressed HTTP responses when it does not request compression 1 {cb1a3322-f0fe-8e8e-bb56-67f4427f3963} 5 The response was rejected because a compressed response was not requested. 1 'LogEvent' 4 3 1 255 The total log storage size limit was exceeded. 1 {77187CDA-B3AD-4A5B-A99A-E9375B90174C} 0 Total log size limit exceeded 1 'LogEvent' -1 3 2 255 An unregistered event occurred. 1 {FFFF8EA3-94EC-11D2-AF53-00E02C069419} 0 Unregistered event 1 'LogEvent' -1 3 1 255 A remote gateway address specified for a VPN site-to-site network cannot be resolved. As a result, a VPN connection cannot be established to the remote network. In addition, if the network used for the VPN connection from the remote server is enabled for NLB, VPN traffic may be picked up by the wrong array member, and not by the intended server. 1 {AACA939C-0672-49CE-96AD-AF973585EE30} 0 Unresolvable remote gateway address on a VPN Network 1 'LogEvent' -1 3 2 255 Server name cannot be resolved to IP address 1 {82C2F3D9-92AD-4070-A5A8-65DB6342DAAE} Unresolvable Server Name 1 'LogEvent' -1 3 16 Upstream chaining credentials are invalid. 1 {FFFF8E9F-94EC-11D2-AF53-00E02C069419} Upstream chaining credentials 1 'LogEvent' -1 3 1 255 VPN client connection attempt failed. 1 {29C46FF7-05A2-4C84-8F67-A42D22AE7837} 0 VPN Connection Failure 1 'LogEvent' -1 3 1 255 A Web publishing rule stopped forwarding requests to a Web farm because there are currently no servers in the Web farm that can accept requests. 1 {7D3BF023-6458-401b-B40B-8777645DBB51} 30 Web Farm Servers Unavailable 1 'LogEvent' -1 1 255 The Web filter was not registered on this server. 1 {3FEB4EC3-F579-4101-8405-68D0FCB5DF45} 0 Web Filter Not Registered. 1 'LogEvent' 30 60 1 1 1 0 1 1 save files for users 0 30 1 3 ffffff0001000000404572040747c801 1 5 1 4 0 {4E32B556-0FAF-4A27-9111-085F679EDC9B} msFPCNetwork 0 1 0 0 1 1 Microsoft Update Cache Rule 0 0 0000000100000000 {b05e0012-5f7a-4869-9612-0ea18b26c924} msFPCDomainNameSet 0 0 0 1 1 1 Default rule 0 0 ffffffff00000000 {18d0438b-5144-4362-b79e-742712513729} msFPCNetworkSet Network representing the internal network. 1 1 Internal 4 10.0.0.0 10.0.255.255 10.255.255.255 10.255.255.255 ISA2006 1 1 http://ISA2006:8080/array.dll?Get.Routing.Script 1 ISA2006 1 0 8080 Built-in network object representing the Internet. External 3 Built-in network object representing the ISA Server computer. Local Host 3 2 Built-in dynamic network representing client computers connecting to ISA Server via VPN that are currently quarantined. Quarantined VPN Clients 3 5 Built-in dynamic network object representing client computers connected to ISA Server via VPN. VPN Clients 3 1 This predefined network set includes all networks. Predefined network sets cannot be modified. All Networks (and Local Host) 1 1 This predefined network set includes all networks, except for the built-in External network. Predefined network sets cannot be modified. All Protected Networks 1 1 {F129EACF-778B-44FE-B339-5B752D7220A3} msFPCNetwork 1 1 Default rule 0 0 ffffffff00000000 0 0 {18d0438b-5144-4362-b79e-742712513729} msFPCNetworkSet 0 0 0 1 Local Host Access 0000000000000000 1 0 {5ED77DCE-8110-4821-B445-008B7E6B7F6D} msFPCNetwork {18d0438b-5144-4362-b79e-742712513729} msFPCNetworkSet 1 VPN Clients to Internal Network 0100000000000000 0 {394b94a2-36d5-4811-9db8-f0754aef4f79} msFPCNetwork {08e7b0e1-287a-4fbd-a33d-b13012e4bc4a} msFPCNetwork {4E32B556-0FAF-4A27-9111-085F679EDC9B} msFPCNetwork 1 Internet Access 0200000000000000 1 {4E32B556-0FAF-4A27-9111-085F679EDC9B} msFPCNetwork {394b94a2-36d5-4811-9db8-f0754aef4f79} msFPCNetwork {08e7b0e1-287a-4fbd-a33d-b13012e4bc4a} msFPCNetwork {F129EACF-778B-44FE-B339-5B752D7220A3} msFPCNetwork 0 0 0 0 100 1 {F129EACF-778B-44FE-B339-5B752D7220A3} msFPCNetwork {4E32B556-0FAF-4A27-9111-085F679EDC9B} msFPCNetwork Connect your Internal network to the Internet and protect it from intruders. layout-large-edge.BMP layout-med-edge.BMP Edge Firewall fffffffb00000000 layout-small-edge.BMP templateEdgeFirewall.xml Connect your Internal network to the Internet, protect it from intruders, and publish services to the Internet from a Perimeter network. layout-large-3leg.BMP layout-med-3leg.BMP 3-Leg Perimeter fffffffc00000000 layout-small-3leg.BMP template3-LegDMZ.xml Use ISA Server as the front line of defense in a back-to-back perimeter network configuration. Use this option when you have two firewalls between the protected Internal network and the Internet. layout-large-front.BMP layout-med-front.BMP Front Firewall fffffffd00000000 layout-small-front.BMP templateFrontFirewall.xml Use ISA Server as the back line of defense in a back-to-back perimeter network configuration. Use this option when you have two firewalls between the protected Internal network and the Internet. layout-large-back.BMP layout-med-back.BMP Back Firewall fffffffe00000000 layout-small-back.BMP templateBackFirewall.xml Specify that ISA Server will be used in a single network adapter configuration inside your Internal or Perimeter network. In this configuration, ISA Server may be used for Web proxying, caching, Web publishing, and OWA server publishing. Some scenarios are not supported in this configuration. layout-large-snm.BMP layout-med-snm.BMP Single Network Adapter ffffffff00000000 layout-small-snm.BMP templateSnm.xml Array Policy 1 MANAGER 0afcffff02000000f0022b07d347c801f0e42f07d347c801 {4E32B556-0FAF-4A27-9111-085F679EDC9B} msFPCNetwork {F129EACF-778B-44FE-B339-5B752D7220A3} msFPCNetwork {0922BC8A-90BF-4036-97D5-A79E1AF26D5B} msFPCUserSet 1 net users 12fcffff03000000f0e76c730f46c801e01374730f46c801d088b09a1446c801 {4E32B556-0FAF-4A27-9111-085F679EDC9B} msFPCNetwork {5ED77DCE-8110-4821-B445-008B7E6B7F6D} msFPCNetwork {F129EACF-778B-44FE-B339-5B752D7220A3} msFPCNetwork {A2FD07A3-4FA3-4A85-87DF-B5D37213B03E} msFPCUserSet 1 IT 15fcffff0100000060cb4eaa2b45c801 {4E32B556-0FAF-4A27-9111-085F679EDC9B} msFPCNetwork {5ED77DCE-8110-4821-B445-008B7E6B7F6D} msFPCNetwork {F129EACF-778B-44FE-B339-5B752D7220A3} msFPCNetwork {9BD88256-EFA4-4CA2-920A-F591B485C854} msFPCUserSet 1 Predefined access rule that protects your networks by blocking all traffic that is not explicitly allowed by other, user defined, access rules. This rule is always processed last. 1 1 Default rule ffffffff00000000 {18d0438b-5144-4362-b79e-742712513729} msFPCNetworkSet {18d0438b-5144-4362-b79e-742712513729} msFPCNetworkSet {DFFB7833-9365-4184-AABC-7CAFB018A7FA} msFPCUserSet Authentication Services: Allow access to directory services for authentication purposes 1 Allow access to directory services for authentication purposes 0000000000000000 1 {5ED77DCE-8110-4821-B445-008B7E6B7F6D} msFPCNetwork 1 {4E32B556-0FAF-4A27-9111-085F679EDC9B} msFPCNetwork {1ce4b611-45e2-4392-ae9d-60922ee6c328} msFPCProtocol {39874bf7-3d52-4875-b1ee-273fad1c7a2f} msFPCProtocol {5eb0c870-d4a4-11d2-bbc4-00a0c9d785a6} msFPCProtocol {800851e2-109e-442b-9131-6cbd341c8dc6} msFPCProtocol {975b0057-5452-4569-b1b4-2a16f2f38c61} msFPCProtocol {DFFB7833-9365-4184-AABC-7CAFB018A7FA} msFPCUserSet Remote Management: Allow remote management from selected computers using MMC 1 Allow remote management from selected computers using MMC 0100000000000000 1 {BECD4ACD-70F7-484D-A161-EA24D887D04F} msFPCComputerSet 1 {5ED77DCE-8110-4821-B445-008B7E6B7F6D} msFPCNetwork {7c18c1cf-4a41-41f0-8d78-a75ecd945448} msFPCProtocol {d4ed71e3-6bb5-4ea6-9617-cd26c3cc3ddb} msFPCProtocol {49fbd904-ade0-4464-a25e-2c14b7775ff4} msFPCProtocol {ef2ab3ab-47aa-4b0f-b907-d53704d4aace} msFPCProtocol {11556F74-6699-4857-98C6-792774484729} msFPCProtocol {DFFB7833-9365-4184-AABC-7CAFB018A7FA} msFPCUserSet Remote Management: Allow remote management from selected computers using Terminal Server 1 Allow remote management from selected computers using Terminal Server 02000000010000000200000000000000 1 {BECD4ACD-70F7-484D-A161-EA24D887D04F} msFPCComputerSet 1 {5ED77DCE-8110-4821-B445-008B7E6B7F6D} msFPCNetwork {c8510020-2abc-4ba8-8554-312022fe6987} msFPCProtocol {DFFB7833-9365-4184-AABC-7CAFB018A7FA} msFPCUserSet Remote Management: Allow remote management from selected computers using a Web application 0 Allow remote management from selected computers using a Web application 02000000010000000100000000000000 1 {BECD4ACD-70F7-484D-A161-EA24D887D04F} msFPCComputerSet 1 {5ED77DCE-8110-4821-B445-008B7E6B7F6D} msFPCNetwork {D891983B-E1D1-4c65-8926-12BFF81462C4} msFPCProtocol {DFFB7833-9365-4184-AABC-7CAFB018A7FA} msFPCUserSet Remote Management: Allow remote logging to trusted servers using NetBIOS 0 Allow remote logging to trusted servers using NetBIOS 0300000000000000 1 {5ED77DCE-8110-4821-B445-008B7E6B7F6D} msFPCNetwork 1 {4E32B556-0FAF-4A27-9111-085F679EDC9B} msFPCNetwork {d4ed71e3-6bb5-4ea6-9617-cd26c3cc3ddb} msFPCProtocol {49fbd904-ade0-4464-a25e-2c14b7775ff4} msFPCProtocol {ef2ab3ab-47aa-4b0f-b907-d53704d4aace} msFPCProtocol {DFFB7833-9365-4184-AABC-7CAFB018A7FA} msFPCUserSet Authentication Services: Allow RADIUS authentication from ISA Server to trusted RADIUS servers 1 Allow RADIUS authentication from ISA Server to trusted RADIUS servers 0400000000000000 1 {5ED77DCE-8110-4821-B445-008B7E6B7F6D} msFPCNetwork 1 {4E32B556-0FAF-4A27-9111-085F679EDC9B} msFPCNetwork {3d7b63ca-3dcb-4957-a322-978cb8bf2d08} msFPCProtocol {cc637256-0cbc-4d44-846a-12768079623c} msFPCProtocol {DFFB7833-9365-4184-AABC-7CAFB018A7FA} msFPCUserSet Authentication Services: Allow Kerberos authentication from ISA Server to trusted servers 1 Allow Kerberos authentication from ISA Server to trusted servers 0500000000000000 1 {5ED77DCE-8110-4821-B445-008B7E6B7F6D} msFPCNetwork 1 {4E32B556-0FAF-4A27-9111-085F679EDC9B} msFPCNetwork {12b3235b-25ab-4bdb-8cb3-1964c9926189} msFPCProtocol {472841ff-a07e-4fe5-bf6b-8e133c542fd1} msFPCProtocol {DFFB7833-9365-4184-AABC-7CAFB018A7FA} msFPCUserSet Network services: Allow DNS from ISA Server to selected servers 1 Allow DNS from ISA Server to selected servers 0600000000000000 1 {5ED77DCE-8110-4821-B445-008B7E6B7F6D} msFPCNetwork 1 {18d0438b-5144-4362-b79e-742712513729} msFPCNetworkSet {5385886B-A141-4DF2-BE58-26550195C2E5} msFPCComputer {01b44810-d4a3-11d2-bbc4-00a0c9d785a6} msFPCProtocol {DFFB7833-9365-4184-AABC-7CAFB018A7FA} msFPCUserSet Network services: Allow DHCP requests from ISA Server to all networks 1 Allow DHCP requests from ISA Server to all networks 0700000000000000 1 {5ED77DCE-8110-4821-B445-008B7E6B7F6D} msFPCNetwork 1 {BE20F10A-A274-436A-A7AD-63A9FC5ED19D} msFPCComputerSet {41a83821-46f6-43cf-aba0-8be480aa7826} msFPCProtocol {DFFB7833-9365-4184-AABC-7CAFB018A7FA} msFPCUserSet Network services: Allow DHCP replies from DHCP servers to ISA Server 1 Allow DHCP replies from DHCP servers to ISA Server 0800000000000000 1 {4E32B556-0FAF-4A27-9111-085F679EDC9B} msFPCNetwork 1 {5ED77DCE-8110-4821-B445-008B7E6B7F6D} msFPCNetwork {a3244b59-ca48-4619-8163-0b65676bd959} msFPCProtocol {DFFB7833-9365-4184-AABC-7CAFB018A7FA} msFPCUserSet Remote Management: Allow ICMP (PING) requests from selected computers to ISA Server 1 Allow ICMP (PING) requests from selected computers to ISA Server 0900000000000000 1 {BECD4ACD-70F7-484D-A161-EA24D887D04F} msFPCComputerSet 1 {5ED77DCE-8110-4821-B445-008B7E6B7F6D} msFPCNetwork {575806a9-0390-43b5-be1c-92c81de41de8} msFPCProtocol {DFFB7833-9365-4184-AABC-7CAFB018A7FA} msFPCUserSet Diagnostic Services: Allow ICMP requests from ISA Server to selected servers 1 Allow ICMP requests from ISA Server to selected servers 0a00000000000000 1 {5ED77DCE-8110-4821-B445-008B7E6B7F6D} msFPCNetwork 1 {18d0438b-5144-4362-b79e-742712513729} msFPCNetworkSet {ce060bef-0c3a-4a86-9b94-74c3a1b57ac9} msFPCProtocol {ac1aa2b2-75ce-44f6-98eb-149b03019159} msFPCProtocol {575806a9-0390-43b5-be1c-92c81de41de8} msFPCProtocol {DFFB7833-9365-4184-AABC-7CAFB018A7FA} msFPCUserSet VPN: Allow VPN client traffic to ISA Server. VPN system policy rules are based on VPN properties, configured in the VPN node of ISA Server Management 0 Allow VPN client traffic to ISA Server 0b00000000000000 1 {F129EACF-778B-44FE-B339-5B752D7220A3} msFPCNetwork 1 {5ED77DCE-8110-4821-B445-008B7E6B7F6D} msFPCNetwork {18CC0FE0-C739-44e5-95AC-D6AE3A2F54FA} msFPCProtocol {DFFB7833-9365-4184-AABC-7CAFB018A7FA} msFPCUserSet VPN: Allow VPN site-to-site traffic to ISA Server. VPN system policy rules are based on VPN properties, configured in the VPN node of ISA Server Management. 0 Allow VPN site-to-site traffic to ISA Server 0c00000000000000 1 {F129EACF-778B-44FE-B339-5B752D7220A3} msFPCNetwork {B9F20168-249A-44da-B47B-A74732B7F0E5} msFPCComputerSet 1 {5ED77DCE-8110-4821-B445-008B7E6B7F6D} msFPCNetwork {DFFB7833-9365-4184-AABC-7CAFB018A7FA} msFPCUserSet VPN: Allow VPN site-to-site traffic from ISA Server. VPN system policy rules are based on VPN properties, configured in the VPN node of ISA Server Management. 0 Allow VPN site-to-site traffic from ISA Server 0d00000000000000 1 {5ED77DCE-8110-4821-B445-008B7E6B7F6D} msFPCNetwork 1 {F129EACF-778B-44FE-B339-5B752D7220A3} msFPCNetwork {B9F20168-249A-44da-B47B-A74732B7F0E5} msFPCComputerSet {DFFB7833-9365-4184-AABC-7CAFB018A7FA} msFPCUserSet Authentication Services: Allow Microsoft CIFS from ISA Server to trusted servers 1 Allow Microsoft CIFS from ISA Server to trusted servers 0e00000000000000 1 {5ED77DCE-8110-4821-B445-008B7E6B7F6D} msFPCNetwork 1 {4E32B556-0FAF-4A27-9111-085F679EDC9B} msFPCNetwork {5b2352c6-b9a4-46a8-b0df-8243f061d0a6} msFPCProtocol {12150c0b-75a7-4a5b-8021-f143b66f60ef} msFPCProtocol {DFFB7833-9365-4184-AABC-7CAFB018A7FA} msFPCUserSet Logging: Allow remote SQL logging from ISA Server to selected servers 0 Allow remote SQL logging from ISA Server to selected servers 0f00000000000000 1 {5ED77DCE-8110-4821-B445-008B7E6B7F6D} msFPCNetwork 1 {4E32B556-0FAF-4A27-9111-085F679EDC9B} msFPCNetwork {1e3db1aa-bbdd-4ebf-900b-f4ec3505cb58} msFPCProtocol {4f0a479d-095a-4620-941f-41b15f752126} msFPCProtocol {DFFB7833-9365-4184-AABC-7CAFB018A7FA} msFPCUserSet Authentication Services: Allow HTTP from ISA Server to selected networks for downloading updated Certificate Revocation Lists (CRL) 1 Allow all HTTP traffic from ISA Server to all networks (for CRL downloads) 1000000000000000 1 {5ED77DCE-8110-4821-B445-008B7E6B7F6D} msFPCNetwork 1 {18d0438b-5144-4362-b79e-742712513729} msFPCNetworkSet {df6cabc0-d4a3-11d2-bbc4-00a0c9d785a6} msFPCProtocol {DFFB7833-9365-4184-AABC-7CAFB018A7FA} msFPCUserSet Network Services: Allow HTTP/HTTPS requests from ISA Server to selected servers for connectivity verifiers 0 Allow HTTP/HTTPS requests from ISA Server to selected servers for connectivity verifiers 1100000000000000 1 {5ED77DCE-8110-4821-B445-008B7E6B7F6D} msFPCNetwork 1 {18d0438b-5144-4362-b79e-742712513729} msFPCNetworkSet {df6cabc0-d4a3-11d2-bbc4-00a0c9d785a6} msFPCProtocol {fe3e20d0-d4a3-11d2-bbc4-00a0c9d785a6} msFPCProtocol {DFFB7833-9365-4184-AABC-7CAFB018A7FA} msFPCUserSet Remote Monitoring: Allow remote performance monitoring of ISA Server from trusted servers 0 Allow remote performance monitoring of ISA Server from trusted servers 1300000000000000 1 {BECD4ACD-70F7-484D-A161-EA24D887D04F} msFPCComputerSet 1 {5ED77DCE-8110-4821-B445-008B7E6B7F6D} msFPCNetwork {d4ed71e3-6bb5-4ea6-9617-cd26c3cc3ddb} msFPCProtocol {49fbd904-ade0-4464-a25e-2c14b7775ff4} msFPCProtocol {ef2ab3ab-47aa-4b0f-b907-d53704d4aace} msFPCProtocol {DFFB7833-9365-4184-AABC-7CAFB018A7FA} msFPCUserSet Diagnostic Services: Allow NetBIOS from ISA Server to trusted servers 1 Allow NetBIOS from ISA Server to trusted servers 1400000000000000 1 {5ED77DCE-8110-4821-B445-008B7E6B7F6D} msFPCNetwork 1 {4E32B556-0FAF-4A27-9111-085F679EDC9B} msFPCNetwork {d4ed71e3-6bb5-4ea6-9617-cd26c3cc3ddb} msFPCProtocol {49fbd904-ade0-4464-a25e-2c14b7775ff4} msFPCProtocol {ef2ab3ab-47aa-4b0f-b907-d53704d4aace} msFPCProtocol {DFFB7833-9365-4184-AABC-7CAFB018A7FA} msFPCUserSet Authentication Services: Allow RPC from ISA Server to trusted servers 1 Allow RPC from ISA Server to trusted servers 1500000000000000 1 {5ED77DCE-8110-4821-B445-008B7E6B7F6D} msFPCNetwork 1 {4E32B556-0FAF-4A27-9111-085F679EDC9B} msFPCNetwork {11556F74-6699-4857-98C6-792774484729} msFPCProtocol {DFFB7833-9365-4184-AABC-7CAFB018A7FA} msFPCUserSet Diagnostic Services: Allow HTTP/HTTPS from ISA Server to specified Microsoft error reporting sites 1 Allow HTTP/HTTPS from ISA Server to specified Microsoft error reporting sites 1600000000000000 1 {5ED77DCE-8110-4821-B445-008B7E6B7F6D} msFPCNetwork 1 {2a276812-7806-4d8e-9a97-c0a6277b0329} msFPCDomainNameSet {df6cabc0-d4a3-11d2-bbc4-00a0c9d785a6} msFPCProtocol {fe3e20d0-d4a3-11d2-bbc4-00a0c9d785a6} msFPCProtocol {DFFB7833-9365-4184-AABC-7CAFB018A7FA} msFPCUserSet Authentication Services: Allow SecurID authentication from ISA Server to trusted servers 0 Allow SecurID authentication from ISA Server to trusted servers 1700000000000000 1 {5ED77DCE-8110-4821-B445-008B7E6B7F6D} msFPCNetwork 1 {4E32B556-0FAF-4A27-9111-085F679EDC9B} msFPCNetwork {bd04bad5-f400-42be-8a01-60ee1ae68e14} msFPCProtocol {DFFB7833-9365-4184-AABC-7CAFB018A7FA} msFPCUserSet Remote Monitoring: Allows remote monitoring from ISA Server to trusted servers, using Microsoft Operations Manager (MOM) Agent 0 Allow remote monitoring from ISA Server to trusted servers, using Microsoft Operations Manager (MOM) Agent 1800000000000000 1 {5ED77DCE-8110-4821-B445-008B7E6B7F6D} msFPCNetwork 1 {4E32B556-0FAF-4A27-9111-085F679EDC9B} msFPCNetwork {fa1319ca-db64-4c15-b4a4-c0173ee6f36a} msFPCProtocol {DFFB7833-9365-4184-AABC-7CAFB018A7FA} msFPCUserSet Various: Allow HTTP/HTTPS requests from ISA Server to specified sites 1 Allow HTTP/HTTPS requests from ISA Server to specified sites 1900000000000000 1 {5ED77DCE-8110-4821-B445-008B7E6B7F6D} msFPCNetwork 1 {2F3EEFF1-746F-438b-82C3-AC010C89F207} msFPCDomainNameSet {df6cabc0-d4a3-11d2-bbc4-00a0c9d785a6} msFPCProtocol {fe3e20d0-d4a3-11d2-bbc4-00a0c9d785a6} msFPCProtocol {DFFB7833-9365-4184-AABC-7CAFB018A7FA} msFPCUserSet Network services: Allow NTP from ISA Server to trusted NTP servers 1 Allow NTP from ISA Server to trusted NTP servers 1a00000000000000 1 {5ED77DCE-8110-4821-B445-008B7E6B7F6D} msFPCNetwork 1 {4E32B556-0FAF-4A27-9111-085F679EDC9B} msFPCNetwork {a0b15a8f-a2aa-4c04-a0e6-8d211ddaf92a} msFPCProtocol {DFFB7833-9365-4184-AABC-7CAFB018A7FA} msFPCUserSet Remote Monitoring: Allow SMTP from ISA Server to trusted servers 1 Allow SMTP from ISA Server to trusted servers 1b00000000000000 1 {5ED77DCE-8110-4821-B445-008B7E6B7F6D} msFPCNetwork 1 {4E32B556-0FAF-4A27-9111-085F679EDC9B} msFPCNetwork {57cf0ac0-d4a5-11d2-bbc4-00a0c9d785a6} msFPCProtocol {DFFB7833-9365-4184-AABC-7CAFB018A7FA} msFPCUserSet Various: Allow HTTP from ISA Server to selected computers for Content Download Jobs 0 Allow HTTP from ISA Server to selected computers for Content Download Jobs 1d00000000000000 1 {5ED77DCE-8110-4821-B445-008B7E6B7F6D} msFPCNetwork 1 {18d0438b-5144-4362-b79e-742712513729} msFPCNetworkSet {df6cabc0-d4a3-11d2-bbc4-00a0c9d785a6} msFPCProtocol {e3be1649-ea5c-49c8-8aea-81091eb19349} msFPCUserSet Remote management: Allows remote management computers to manage services running on the ISA Server computer. 1 3847 3847 Allow MS Firewall Control communication to selected computers 1e00000000000000 1 {5ED77DCE-8110-4821-B445-008B7E6B7F6D} msFPCNetwork {BECD4ACD-70F7-484D-A161-EA24D887D04F} msFPCComputerSet {DFFB7833-9365-4184-AABC-7CAFB018A7FA} msFPCUserSet 2 0 NNTP 563 563 SSL 443 443 {9fbc7d4d-f65d-4149-9c93-1c750492c377} msFPCContentTypeSet {23b0dfe2-c9e1-4426-b74d-09cf1e34f0f5} msFPCContentTypeSet *BITS* x-flash-version: 1 0 1 1 1 1 1 1 3 8000000000000000100000000000000008020000000000000000000000000000 1 6000 400 400 6000 400 1 440069007300610062006c0065003d00310000000000 exchng32 520065006d006f0074006500420069006e00640055006400700050006f007200740073003d0030000000530065007200760065007200420069006e00640054006300700050006f007200740073003d0030002c0031003000320035002d00350030003000300000004e0061006d0065005200650073006f006c007500740069006f006e0046006f0072004c006f00630061006c0048006f00730074003d00500000000000 icq 440069007300610062006c0065003d00310000000000 inetinfo 7300630070003d0039002c00310030002c003100310000000000 Internal 440069007300610062006c0065003d00310000000000 kernel32 440069007300610062006c0065003d00310000000000 lsass 440069007300610062006c0065003d00300000000000 mapisp32 530065007200760065007200420069006e00640054006300700050006f007200740073003d00300000000000 net2fone 440069007300610062006c0065003d00310000000000 outlook 520065006d006f0074006500420069006e00640055006400700050006f007200740073003d0036003900370030002d00370031003700300000004c006f00630061006c00420069006e00640054006300700050006f007200740073003d00370030003700300000000000 raplayer 520065006d006f0074006500420069006e00640055006400700050006f007200740073003d0036003900370030002d00370031003700300000004c006f00630061006c00420069006e00640054006300700050006f007200740073003d00370030003700300000000000 realplay 440069007300610062006c0065003d00310000000000 rpcss 520065006d006f0074006500420069006e00640055006400700050006f007200740073003d0036003900370030002d00370031003700300000004c006f00630061006c00420069006e00640054006300700050006f007200740073003d00370030003700300000000000 rvplayer 440069007300610062006c0065003d00310000000000 services 440069007300610062006c0065003d00310000000000 spoolss 440069007300610062006c0065003d0031000000440069007300610062006c006500450078003d00300000000000 svchost 440069007300610062006c0065003d00310000000000 w3proxy 440069007300610062006c0065003d00310000000000 winlogon 440069007300610062006c0065003d00310000000000 wspsrv 1 252698623 1 1 db1 FirewallLog 3 1 1605828535 1 1 db1 WebProxyLog 3 1 {e826736f-262a-47af-8871-980561676073} msFPCNetworkTemplate 010000002e000000460069007800460069006c007400650072004e006f00740069006600690063006100740069006f006e00730000000200ffff {143F5698-103B-12D4-FF34-1F34767DEabc}