• Home
  • Consulting
  • Contact Us
    • About this site
    • Contact Wayne
    • Media Room
    • Wayne’s Bio

SBSFAQ.COM

Supporting IT Pro's & MSP's since 2000

  • Blog
  • FAQs
  • Reviews
  • Downloads

GFI Webmonitor for ISA v3.0 to v4.0 Upgrade may cause very slow internet access for users

August 29, 2007 by Wayne Small 7 Comments

Today I’ve done an inplace upgrade for a customers ISA 2004 server up to ISA 2006 the upgrade itself went well once we removed the Firewall Client Share in ISA 2004. The client uses GFI’s Webmonitor for ISA Server to monitor their users and block certain sites. It works pretty well and gives them control over the users internet access above and beyond that provided by ISA. The client was on v3.0 of this product and following the upgrade I noticed an error message in the event log.

Event Type:        Warning

Event Source:        Microsoft ISA Server Web Proxy

Event Category:    None

Event ID:        21237

Date:            29/08/2007

Time:            8:22:48 AM

User:            N/A

Computer:        SERVERNAME

Description:        Web filter 'GFI WebMonitor3 filter' is not installed on this server. Install the filter and then restart the Firewall service.

I figured that if we removed Webmonitor for ISA v3.0 and installed the later version all should be good. So we removed the old version, downloaded and installed the later version which also went well. However we then found that any HTTP access to the internet was so slow as to timeout. We found that this also related to the http://monitor.isa as well. A dig into the event logs found the following;

Event Type:        Warning

Event Source:        ASP.NET 2.0.50727.0

Event Category:    Web Event 

Event ID:        1309

Date:            29/08/2007

Time:            8:49:14 AM

User:            N/A

Computer:        SERVERNAME

Description:

Event code:         3005 
Event message: An unhandled exception has occurred. 
Event time: 29/08/2007 8:49:14 AM 
Event time (UTC): 28/08/2007 10:49:14 PM 
Event ID: 380151aedd694068b8688d3cee0ddb40 
Event sequence: 12 
Event occurrence: 1 
Event detail code: 0 
 
Application information: 
    Application domain: 877b0161-1-128328149238155063 
    Trust level: Full 
    Application Virtual Path: / 
    Application Path: C:\Program Files\GFI\WebMonitor\Interface\ 
    Machine name: SERVERNAME 
 
Process information: 
    Process ID: 4144 
    Process name: WMonWeb.exe 
    Account name: DOMAIN\ServiceAccount 
 
Exception information: 
    Exception type: HttpException 
    Exception message: Session state has created a session id, but cannot save it because the response was already flushed by the application. 
 
Request information: 
    Request URL: http://localhost:1007/UrlHistory.aspx?ID=1 
    Request path: /UrlHistory.aspx 
    User host address: 127.0.0.1 
    User:  
    Is authenticated: False 
    Authentication Type:  
    Thread account name: DOMAIN\ServiceAccount 
 
Thread information: 
    Thread ID: 4 
    Thread account name: DOMAIN\ServiceAccount 
    Is impersonating: False 
    Stack trace:    at System.Web.SessionState.SessionIDManager.SaveSessionID(HttpContext context, String id, Boolean& redirected, Boolean& cookieAdded)

   at System.Web.SessionState.SessionStateModule.CreateSessionId()

   at System.Web.SessionState.SessionStateModule.DelayedGetSessionId()

   at System.Web.SessionState.SessionStateModule.OnReleaseState(Object source, EventArgs eventArgs)

   at System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()

   at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)

Ok at this point we just needed to get services running for the user, so we disabled the Web Filter via ISA 2006’s Management Console and things worked fine for us. I then talked to GFI’s Tech Support here in Australia and found that they have in the last 24hours heard about this problem and they are investigating. To resolve the issue for the client at the moment they suggested that we remove v4 and reinstall v3. This worked fine for us and we’ve got our monitoring back again. I’ll post here again with the solution once it becomes available.

Share this:

  • Click to share on Facebook (Opens in new window)
  • Click to share on Twitter (Opens in new window)
  • Click to share on LinkedIn (Opens in new window)
  • Click to share on Reddit (Opens in new window)
  • Click to print (Opens in new window)

Filed Under: Blog Tagged With: Troubleshooting

About The Author

Wayne has been working with Microsoft Server products in the SMB market for over 20 years. He has a passion for technology and been a Microsoft MVP for over 15 years. Read More…

Comments

  1. Anonymous says

    September 29, 2007 at 9:17 am

    It only happens on an ISA server with a lot of users. At least that’s where it’s happening to us. An ISA server with only a few dozen users is not having the problem. Oddly, it took a couple of days for it to start but then we started experiencing it a couple of times a day. A Microsoft Firewall service restart would restore normal operation for a few hours.

    I kind of wish they would have mentioned you when I asked if others were having this problem. I had a month of h*** because of it because we could not pinpoint what was causing it. We had the same event log entry but maybe once a day or less

    Reply
  2. Scott says

    February 12, 2008 at 2:10 pm

    I am getting the exact same error on our ISA server also. However, it is very lightly loaded. Did anyone ever find a fix?

    Reply
  3. Pavel says

    March 5, 2008 at 10:53 pm

    Hi, we’re running WebMonitor 4 on ISA 2006 and having same problem – sometimes slow connection and approx 2 times a day ASP.NAT 1309 error. We contacted GFI support, but no answer – has anybody find solutin?
    thanks
    Pavel

    Reply
  4. Anonymous says

    March 5, 2008 at 11:29 pm

    I’ve been asked several times now for a solution to this and despite lodging a case with GFI support and speaking to the local GFI Director, it’s not been fixed. My customer is stuck using the older version of their product.
    Wayne

    Reply
  5. Tony says

    April 16, 2008 at 2:25 am

    So I too was getting this error in the event log but it seems to have stopped after installing the reporting package…

    I did not do the upgrade… I installed version 4 right off the bat with ISA 2006. Also make sure you have the latest build of ISA 2006. If you go to ISA downloads on Microsoft’s Website there’s a logging package you download which enhances the query feature but this also changes the ISA build number too.

    Reply
  6. vlazari says

    April 30, 2008 at 12:55 am

    I have the same problem please send me information if somebody could resolved it

    Reply
  7. Download Files says

    March 20, 2014 at 6:04 am

    It truly is best time for it to create a few plans for that long term and it is time to be happy. I see this upload and in case I really could I must highly recommend a person quite a few useful points and also advice. You could can easily write next posts regarding this content. My spouse and i desire to discover more items around it!

    Reply

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Search

Connect Online With Us

  • Facebook
  • Twitter

Reviews

Splashtop – Cost Effective Remote Control Software

September 22, 2017 By Wayne Small 2 Comments

Western Digital DL4100 NAS

March 3, 2015 By Wayne Small Leave a Comment

SBS 2011 Configuring Certification Guide (70-169)

August 7, 2012 By Wayne Small 4 Comments

Site News

Exchange Bug Stops Mail Delivery in 2022

January 2, 2022

Huge bug found in Intel CPU that could permit hackers to steal your data

January 4, 2018

Recent Posts

  • MS Exchange Zero Day and RemotePowerShell Disabling on Admin accounts
  • Setup changes for Exchange 2016 and Exchange 2019
  • Bluetooth Mouse and Keyboard Randomly Stop Responding
  • Exchange Bug Stops Mail Delivery in 2022
  • How to open and search extremely large text log files

Tags

Antivirus Backup Business Focus Cloud Computing Community Conferences Disaster Recovery Exchange 2010 Exchange Server Future Products Hyper-V Installation Microsoft Migration Patches Personal Rants SBS 4.5 SBS 2000 SBS 2000 SP1 SBS 2003 SBS 2003 Premium SBS 2003 R2 SBS 2003 R2 Premium SBS 2003 R2 Standard SBS 2003 SP1 Premium SBS 2003 SP1 Standard SBS 2003 Standard SBS 2008 SBS 2008 R2 SBS 2011 SBS 2011 Essentials SBS 2011 Standard Security Service Packs ShadowProtect SMB Community Software Software I use StorageCraft Training TrendMicro Troubleshooting Virtualisation Windows Server 2012 Essentials

Terms of Use

Privacy Policy

Copyright © 2023 · Magazine Pro Theme on Genesis Framework · WordPress · Log in