FIX: ISA Firewall Causes Handle Leak in LSASS

View products that this article applies to.

Symptoms

Internet Security and Acceleration (ISA) Server Firewall service may slow down or stop responding to client requests.

This behavior occurs under the following configuration:

The internal clients are running the ISA Server Firewall client.

-and-
The ISA Server has access policies defined that require user authentication. This might be Protocol rules or Site and Content rules that apply to specific users or groups.

↑ Back to the top

Cause

The ISA Server Firewall service causes a handle leak in the Local Security Authority (LSASS) process.

You can detect the leak by using the System Monitor (Perfmon) tool to analyze the Handle Counter for LSASS Process.

↑ Back to the top

Resolution

To resolve this problem, obtain the Update Rollup for ISA Server Services. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

810493 INFO: Update Rollup for ISA Server Services

↑ Back to the top