Initialization of NAT and Firewall Failure

[niherst]

I recieve the following error when trying to start the Firewall service. I am using a dialup entry. With dial on demad.

Microsoft Firewall failed. The failure occurred during Initialization of Network Address Translation (NAT) because the configuration property msFPCName of the key SOFTWARE\Microsoft\Fpc\Arrays\{32E2AC0B-35CB-48B7-B30C-10D9ABDECA86}\PolicyElements\DialupEntries\{8A631B95-B1FF-4279-82F0-22E8C41DF39E}\Credentials could not be accessed. Use the source location 2.1927.3.0.1200.235 to report the failure. The error code in the Data area of the event properties indicates the cause of the failure. For more information about this event, see ISA Server Help. The error description is: The system cannot find the file specified.

 

[rubbaninja]

Delete the NAT routing protocol from the IP Routing section in the RRAs console tree.

If you have any 3rd party nat software installed remove that too.

(Found quickly in computer management/services and applications).

Always note changes in detail in case you need to switch back.

good luck

 

[niherst]

There is no NAT routing protocol in the IP Routing Section. The only one that is there is the Default rule that was setup during the initial ISA install.

 

[rubbaninja]

Are you looking at the IP Routing section for Windows Rras rather than ISA?
ISA NAT and RRas NAT are butting heads.

Should be there... =/

Hope you get it worked out.

If you figure it out please post your resolution =)

A

 

[niherst]

Windows Rras is not even configured/setup. Should I set it up and check to see if there is a NAT routing protocol?

 

[rubbaninja]

I apologize, I went down the wrong road on this. Go to policy elements\dialup entries.

Is there a dialup entry?
If so, it looks like the credentials on that are incorrect.

I'm not sure if there is a "properties" option if you right click the dialup entries container but if there is you will want to check the security on it... something with Dialup entries is not happy.
You can search your registry for {8A631B95-B1FF-4279-82F0-22E8C41DF39E}. My guess is it will not be there but you will have an entry in the policy.

So, try those different suggestions. I hope it works out for you.

 

[niherst]

There is a dial-up entry. However there is no secuity option/settings on the properties tab.

Since the dial-up entry is on that drops and re-connects often the entry in the registry changes continually.

However I must mention that the user name(account) that I am using to connect is not listed is my AD. Should I add it into my Active Directory users?? Is this part of my problem?