Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. Firewall service does not start when you are using the Internet Connection Wizard

Firewall service does not start when you are using the Internet Connection Wizard

View products that this article applies to.

This article was previously published under Q313964

↑ Back to the top

Symptoms

On a computer that is running Microsoft Windows Server 2003 or Microsoft Windows Server 2003 Enterprise, the ISA Server Firewall service may not start if you enable the Internet Connection Firewall, and the following error message may be logged in the System event:
Microsoft Firewall failed. The failure occurred during Initialization of Network Address Translation (NAT) because the system call InitNAT failed.
Use the source location 308.1113.3.0.1200.123 to report the failure. The error code in the Data area of the event properties indicates the cause of the failure. For more information about this event, see ISA Server Help. The error description is: Access is denied.

↑ Back to the top

Resolution

To resolve this problem, obtain latest service pack for ISA Server 2000. For more information about the latest service pack, click the following article number to view the article in the Microsoft Knowledge Base:
313139� How to obtain the latest Internet Security and Acceleration Server 2000 service pack

↑ Back to the top

Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

This problem was corrected in ISA Server 2000 SP1.

↑ Back to the top

More information

After you apply the ISA Server service pack, an example of the logged event appears as:
Microsoft Firewall failed. The failure occurred during Initialization of Network Address Translation (NAT) because the system call PNATInit failed. Use the source location 308.1151.3.0.1200.153 to report the failure. The error code in the Data area of the event properties indicates the cause of the failure. This failure may be due to the Internet Connection Firewall (ICF) service being enabled. If it is enabled, please disable the service named "Internet Connection Firewall (ICF) / Internet Connection Sharing (ICS)" (SharedAccess). Then, restart the computer. For more information about this event, see ISA Server Help. The error description is: Access is denied.
Note that ICF and the ISA Server Firewall are still mutually exclusive services. That is, you can start only one of the services a one time. If you want to protect large networks and you have purchased ISA Server, you should be using the ISA Firewall service, because it provides greater functionality and reporting capabilities.

↑ Back to the top

Keywords: KB313964, kbnofix, kbenv, kbbug

↑ Back to the top

Article Info
Article ID : 313964
Revision : 5
Created on : 10/31/2006
Published on : 10/31/2006
Exists online : False
Views : 311