Array Member stopped responding, but was not dropped from NLB

We have had a standalone TMG array running for ~2 years now and recently had an issue come up we haven't seen before. Some users started complaining that all of our sites were unreachable. It would not even load the Forms Based Auth pages from the TMG server.
It would just spin, then time out. After investigation, it appeared 1 of the array members was not responding to requests, but was still in the NLB pool and trying to process requests.
The only symptoms I saw on the problematic array member were:
1- The servers was using 100% of the ram. They have 8GB allocated, and have never gone over 6GB.
2- There were 'Intrusion Detection' warnings about an all port scan attack from the TMG server to itself. So array member 1 was warning about a scan attack from a it's own public IP.
The issue was fixed with a reboot, but now I need to figure out the cause of this issue, and figure out a way to detect when it happens again.

Hi,
Thanks for your question.
As you mentioned, the RAM/memory usage is 100%. Did you see that in Task manager? Can you also see any app/process is using multiple memory?
In addition, I understand that TMG detected an all port scan attack from its external interface. Which traffic is routed via that external IP address? Maybe it is due to an IP spoofing.
Best regards,
Susie

Similar Messages

Maybe you are looking for

  • New events created in phone are not synced to iCal

    While waiting for my economy to allow for an iPhone, I recently started to use my old mobile, a Sony-Ericsson T610, for calendars. The problem is that events I create in the phone won't sync back to the computer. iCal syncs its events into the phone

  • Flash player work with Safari, but not with Internet Explorer

    My flash player had a problem so I uninstalled it.  I had a problem downloading the player with Internet Explorer, so I successfully download it with Safari.  The player works fine with Safari, but I cannot get it to work with Internet Explorer 8. I

  • What is the use of DataGatherer service ?do i want to start..

    what is the use of DataGatherer service ?do i want to start.in 11.5.9 and what is the use of metric server &metric client?do i want to start..

  • Protocol violation Error with 17401 error code

    Hi, When we are trying to call stored procedure with below syntax we are getting "com.ibm.websphere.ce.cm.StaleConnectionException: Protocol violation" error with error code 17401 in local IRAD application and also in deployed application of WAS. cal

  • Save as Tiff in Pages

    I used to have 'Save as Tiff' when printing in Pages before.  How could I enable it again?