SBS 2000 ISA Server

[grabrail]

event id 14120

The ISA Server services cannot create a packet filter 216.239.39.100. This event occurs when there is a conflict between the Local Address Table (LAT) configuration and the Windows 2000 routing table. Check the routing table and the LAT to find the source of the conflict.

I get this event everytime someone uses the internet in our network. Obviously the ip address changes. There is no conflict between LAT and Routing table. This event clogs up the Event log and is a pain in the bum.

Has anybody got any deas what I can do to prevent this happening

 

[Guest_imported]

try this perhaps

http://support.microsoft.com/support/kb/articles/Q288/3/96.ASP

 

[Guest_imported]

Hi, you need more than one network adaptor if you have the firewall program running as well.


Microsoft Web Proxy Event 14120 for Every Web Request (Q288236)

--------------------------------------------------------------------------------
The information in this article applies to:


Microsoft Internet Security and Acceleration Server 2000


--------------------------------------------------------------------------------


SYMPTOMS
If you install Microsoft Internet Security and Acceleration (ISA) Server 2000 in Integrated mode on a computer with only one network interface card the following event may be logged for each Web Proxy request:

Event Type: Error
Event Source: Microsoft Web Proxy
Event Category: None
Event ID: 14120
Date: 01/02/2001
Time: 11:28:50
User: N/A
Computer: SERVERNAME
Description:
The ISA Server services cannot create a packet filter 157.54.12.183. This event occurs when there is a conflict between the Local Address Table (LAT) configuration and the Windows 2000 routing table. Check the routing table and the LAT to find the source of the conflict.
Data:
0000: 15 00 00 00 ....



CAUSE
ISA generates a dynamic packet filter for every outgoing connection object so it can listen to the reply from the requested web server. On a machine with only one interface this will fail as it is not possible to do packet filtering.

Installing ISA Server in Integrated or Firewall mode requires a minimum of two network interface cards (NICs) for the packet filtering and Network Address Translation to work properly. This can either be two NICs or one NIC and one dial-up adapter. If you install ISA server in Integrated mode on a computer with only one network interface, ISA Server may log an event 14120 for each Web Proxy request.



RESOLUTION
Installing ISA Server in Integrated or Firewall mode on a computer with only one network interface is not supported. To resolve this problem, uninstall ISA Server and install it in Cache mode or add an additional network interface.

 

[Sithl0rd]

This problem occurs when 3 different situations occur. Only two of them are on technet.
The first one is if you have only one network card in the ISA Server.
The second is when there is DNS conflict for the external NIC with the internal & external DNS record. This rarely ever occurs.
The third one which i can not find on technet, but ive seen happen a few times before, is when both NIC's in the ISA server are on the same network ie. They both use 192.168.0.x

But as the technet article says, it doesnt cause ISA to stop functioning, it just fills up the eventlog with entrys. You can setup event viewer to automatically overwrite entries when it gets full.