Client computers cannot access external resources, and event ID 14147 appears in the Application log in ISA Server 2006, ISA Server 2004, Microsoft Forefront Threat Management Gateway, Medium Business Edition, or Windows Essential Business Server 2008

Event Source: Microsoft Firewall
Event Category: None
Event ID: 14147
Date: date
Time: time
Type: Error
User: N/A
Computer: computer name
Description: ISA Server detected routes through adapter "adapter name" that do not correlate with the network element to which this adapter belongs. The address ranges in conflict are: start IP address - end IP address;. Fix the network element and/or the routing table to make these ranges consistent; they should be in both or in neither. If you recently created a mobile site network, check if the event recurs. If it does not, you may safely ignore this message.

Event Source: Microsoft Firewall
Event Category: None
Event ID: 15108
Date: date
Time: time
Type: Error
User: N/A
Computer: computer name
Description: ISA Server detected a spoof attack from Internet Protocol (IP) address IP address. A spoof attack occurs when an IP address that is not reachable via the interface on which the packet was received. If logging for dropped packets is set, you can view details in the packet filter log.