TMG Stops responding every 4 days / many connection drops with idle vpn connections

Hi everyone!
I am running a TMG Firewall with about 200 users connected on Server 2008 R2 - patch level 7.0.9193.601.
It is virtualized on a Hyper-V 2008 R2. Additionally we have 4 IPsec Site2Site VPNs configured in Windows Advanced Firewall - as TMG doesn't provide such a comfortable way to configure them directly in TMG.
About 3 Months ago that TMG started to lose connectivity from time to time. At first we were not monitoring that problem precisely as we thought it was an isp issue but some days before christmas that tmg server just dropepd every outgoing connection
and stopped listening!
I was able to control the server over hyper-v directly but no connection in or outbound could be established. (no VPN inc or surf outgoing)
I checked the event logs and there was NO other error than the errors from TMG connection verifiers...
As far as I was able to tell tmg still worked as far as logs and engine was conserned but no routing was done at all!
The last resort was to reboot the TMG then everything worked as before...
This behavior then appeard every 4 days... - simple workaround scheduled reboot every 3 days!
But that is no statisfying solution.... additionally some vpn users reported that their connections has quite annoying drops from time to time, unfortunately I was not able to trace the error.
Possible sources that I can exclude:
-Backup (online snapshot with ArcServe - the server was NOT saved)
-AV (Symantec Endpoint protection 12.1 - was uninstalled nothing changed)
Any ideas??
Best regards

Hi,
opening a MS case seems not to be so easy...
As long as I have no clue whats going on exactly there is no ms case.
Any other suggestions??
I started collecting Perfmon data: everything seems to be OK.
- hardly any backlogged packets
- during working hours about 10 pages / sec (memory)
Some Values:
Free System Page Table Entries: 33.555
Pool Nonpaged Bytes: 88.646.372 Bytes = 84,53 MB
Pool Paged Bytes: 266.842.112 Bytes = 254,48 MB
System Driver Total Bytes: 4.812.800 Bytes = 4,5MB
Handle Count (wspsrv): 11.338Private Bytes (wspsrv): 821.944.320 Bytes = 783,86 MB
Working Set (wspsrv): 609.697.792 Bytes = 581,4 MB
Virtual Bytes (wspsrv): 1.747.615.744 Bytes = 1,666 GBThread Count (wspsrv): 69
I'll keep collecting data for two days because my last reboot was 2 days ago - if my observations were correct TMG will stop responding monday morning or during lunchtime at latest.

Similar Messages

Why does my keybord and mousepad stop responding every 10-20 sec?

why does my keybord and mousepad stop responding every 10-20 sek? lasting for a few seconds.
this is a new problem that started this friday.
what to do?

Try resseting the devices or changing the batteries. Also try restarting your MacBook. You should be shutting down every night.

Help needed to Replace existing routers due to connection drop with Extreme

I currently have an old linksys router connected to my cable modem in the basement. I then have a second router connected via ethernet to the first router located upstairs since most of my computers are upstairs. I am having alot of connection drops with most of the computers. ONe of the computers hardly even connects to the network. Almost all of my computers are macbook pros/macbooks/imac except for 1 or 2 pcs. I would like to start fresh with the airport extreme/express. Should I set it up similar in that I have an airport extreme base station connected downstairs to the modem and then have a second extreme/express upstairs via the ethernet connection. I do have a printer upstairs as well that most of the computers use that is connected wirelessly.
Any other tips?

No,
Express has only one ethernet port which acts either as WAN input if plugged into a modem or as LAN output, if plugged into an end device (PC, Printer), so it cannot be used for input and output at the same time. I'd suggest you do this,
1/
- If modem must stay in the basement and cannot be moved upstairs
- Have modem in basement
- Run an ethernet cable from the modem to your Extreme's WAN port upstairs
- Have Express in the basement and connect it wirelessly
let it join your Extreme's network over wifi, if there is enough signal in the basement
- If there is no signal in the basement from upstairs' Extreme and Express finds
nothing or signal is unreliable, then you need to run an ethernet cable
from Extreme's LAN port (it has 3 in the back) and run it downstairs
and plug into your Express.
2/
- move the modem upstairs and keep the setup same as in 1/
- no difference, you still have to run the coax cable from basement,
so you drill no matter what
3/
- keep modem downstairs
- keep extreme downstairs connected to modem
- keep express upstairs and join it wirelessly to your Extreme's network
- plus side is - there would be no cables running upstairs
- downsides of this setup are:
you'll have router with only one ethernet port upstairs - so if you have"
multiple desktops, you will have to rely on wifi
Extreme's signal is stronger than Express's - I'd put it into a place where
my family spends most of the time
It all depends on your house setup, whether you have desktops or laptops only, ...
As a preference, I like to keep Extreme close to my main computer as I connect to it via ethernet rather than wifi (much better speed). My wifi is only for laptops and iPods.
Also, seing the Extreme's status light tells me what is going on without running to a basement when internet starts acting up.
Rule of thumb - if you can drill, then drill and take advantage of the gigabit speed as opposed to wifi's 100megabit or whatever your signal lets you get up to. This is very noticeable when streaming movies via Netflix, AirPlay etc...
If drilling is too much hassle, you live in an apartment unit or it's a transitory place for you, just use Wifi. If you are planning on living there for a while, cables will make you happier than wifi - no interference to worry about and better speed
It's up to you.
My apple TV is also connected to my Extreme via cable - speed is incredible. Wifi used to choke up every now and then.

When I connect to my usual VPN connection, I can no longer connect to email, internet, etc.

Upgraded to Yosemite. When I connect to my usual VPN connection, I can no longer connect to email, internet, etc. Only happening on my MacBook Pro. My iMac works fine. Thoughts?

Richard, I think there's a solution. Found this on another support site:
..."There is a long discussion of the problem as it relates of iOS8 and OS10.10 here:
https://discussions.apple.com/thread/6555023?start=0&tstart=0"
..."DNS will no longer work with .local domains which do not advertise a SOA record"
..."Just simply add domain.local in the pane of Search Domains which is in Network / VPN / Advanced / DNS tab"
Did just that and now .local's resolve correctly. (make sure to restart the vpn connection to apply the new search).

My IPad2 will not connect to the internet, "Safari could not open the page because the server stopped responding." My AirPort utility shows that I am connected. What could be the problem?

My iPad2 will not connect to the internet, "Safari could not open the page because the server stopped responding". I've run the AirPort utility and it shows that I'm connected to my Wi-Fi. The connection works with both my iMac and iPhone. I'm concerned that the problem is with hardware rather than software.

Try the following:
1. Turn router off for 30 seconds and on again
2. Settings>General>Reset>Reset Network Settings
3. Reset iPad; hold the Sleep and Home button down until you see the Apple Logo

Contribute CS4 stops responding every time I try to add a link

I recently had to re-install Contribute CS4 when I updated to a new computer and operating system (now on Windows 7). Now, Contribute seems to work fine - until I try to add a link on any page I am editing. Whenever I select the Link button, Contribute will stop responding and will force the software to shut down. Please advise!

Hi There,
Please try below steps and check if it works for you :
Close contribute.
Go to : C:\Users\username\AppData\Local\Adobe and rename "Contribute CS4" to "Contribute CS4_old".
Go to : C:\Users\username\AppData\Roaming\Adobe and rename "CS4ServiceManager" to "CS4ServiceManager_old"
Launch contribute and try again.
In case the above does not work then try reinstalling contribute or try recreating the connection.
Regards,
Mayank

Firefox stops responding every time I make any kind of input. It then flashes and comes right back

Everytime I click on something or type something, Firefox will stop responding for a couple of seconds and then return. It's curious that it will stop responding as I am typing something in and the letters that I typed while it wasn't responding obviously didn't appear but when it came back on the letters were there. Also, when I first turn on the computer, I click on Firefox and it opens right away but closes as soon as I try to do anything. I open it a second time and it is fine until the most recent response problem. I opened the task manager and Firefox was listed at 65,000 in the process monitor. I feel like Firefox is running twice and it is suspiscious. I tried to open it and it said I had to close the one already running which there wasn't. Any ideas.
Windows 7 home premium 64 bit sp-1

You can check for problems with the sessionstore.js and sessionstore.bak files in the Firefox profile folder that store session data.
Delete the sessionstore.js file and possible sessionstore-##.js files with a number and sessionstore.bak in the Firefox profile folder.
*Help > Troubleshooting Information > Profile Directory: Show Folder (Linux: Open Directory; Mac: Show in Finder)
*http://kb.mozillazine.org/Profile_folder_-_Firefox
*http://kb.mozillazine.org/Multiple_profile_files_created
Deleting sessionstore.js will cause App Tabs and Tab Groups and open and closed (undo) tabs to get lost and you will have to recreate them (make a note or bookmark them if possible).
Create a new profile as a test to check if your current profile is causing the problems.
See "Creating a profile":
*https://support.mozilla.org/kb/profile-manager-create-and-remove-firefox-profiles
*http://kb.mozillazine.org/Standard_diagnostic_-_Firefox#Profile_issues
If the new profile works then you can transfer some files from an existing profile to the new profile, but be cautious not to copy corrupted files to avoid carrying over the problem.
*http://kb.mozillazine.org/Transferring_data_to_a_new_profile_-_Firefox
Boot the computer in Windows Safe Mode with network support (press F8 on the boot screen) as a test to see if that helps.

Firefox stops responding every 10 mins or so

Firefox keeps continually not responding every 10 min or so. It happens when doing pretty much anything--videos, Flash games, or just viewing a web page. This has been going on for about a month now and is very annoying. I'm considering switching to Chrome. Please help!

Does this still happen if you [[Troubleshooting extensions and themes|restart Firefox with add-ons disabled]]?

Connection drops with arch64 and atheros wireless

Hi, I've just installed arch64 on my desktop. I have a dlink dwa-556 wireless adapter, with atheros chipset. The card is seen correctly and has been configured. I started a kdemod install with pacman, went on for about an hour, and then it hung, the wireless connection dropped... I tried to start it up again, but only a reboot could help... now I started pacman again and after some minutes bang! connection dropped again...
this is what iwconfig says
wlan0 IEEE 802.11bgn ESSID:CUT
Mode:Managed Frequency:2.432 GHz Access Point: Not Associated
Tx-Power27dBm
[cut]
Link Quality:0 Signal level:0 Noise level:0
[rest is all 0]
iwlist says my router has a quality of 30-40/100 and a signal level of around -76dBm
any help?
edit: typo on title
Last edited by sunriis (2009-02-19 18:45:04)

I think I may be experiencing something similar. I'm also running Arch64 and have the exact same adapter (DWA-556) and every once in a while my wireless connection drops. It only happens once every few days or so, but whenever it happens on my system it seems to cause anything Xorg-related (mouse, keyboard, video) to respond slowly. If I move the mouse around it doesn't move smoothly - it kind of jerks and jumps around.
Whenever the connection drops like this, I see the something like the following in /var/log/messages.log:
Feb 16 17:07:26 blacktower dhcpcd[19326]: ath0: carrier lost
The first couple of times this happened to me, I had to reboot to get the connection going again. I did find another way to get the connection working, though. What I did was unload the modules related to the wireless adapter, reload them, and then reconnect to the network. I wrote a quick shell script to do this for me, which looks like this:
#!/bin/sh
sudo rmmod ath_pci ath_rate_sample ath_hal
sudo modprobe ath_pci
sudo modprobe ath_hal
sudo netcfg -d home
sudo netcfg home
I'm using the madwifi driver right now and as you can see, I use netcfg to connect to my wireless network here. I've tried the ath5k driver but I seem to have the same issue with that. I haven't really found a solution to this yet, but the workaround of removing the modules, reloading them, and then reconnecting has worked well enough so far. If I dig up anything else helpful on this, I'll be glad to post it here.

Internet stops with PPTP VPN connections to ASUS RT-N66U VPN Router

I have a client with a small office network that has a few people working remotely from Windows 7 and 8 PCs. As an inexpensive solution the client opted to use a VPN router (ASUS RT-N66U) that supports PPTP so remote users could access the shared
files and SQL DB server.
The VPN connectivity for one client was working fine and then stopped working altogether so when the VPN connection is established all Internet and VPN access is stopped. This was especially troubling for me since I work remotely and cannot test or debug after
the VPN session has been connected. I checked the error logs and found nothing. Also there had been no new programs installed. And finally, I ran a full system antivirus scan with no issues found.
In case you are facing a similar issue, before trying something remotely that may not work, use the shutdown with reboot command in a COMMAND window and set a timer for something like 3 minutes to reboot in case you get stuck. (e.g. shutdown -r -t 180).
Problem: The two symptoms of the VPN connection failure are:
1) All Internet browsing stops working locally
2) No data can pass through the VPN tunnel
I created a virtual machine on my local network and replicated the client's environment. I experimented with nearly every setting in the VPN dialogue until and came to the final solution.
Solution: For the VPN adapter on the remote machines I configured DNS settings and used the remote as the default gateway.
* VPN adapter Networking IPV4 Properties for:
- DNS server 1: Main Office VPN Router IP Address
- DNS server 2: A public DNS server (Google is 8.8.8.8)
- I also checked the box to "register this connection addresses in DNS"
Note: Perhaps the local router would also have worked and DNS2 but I didn't test it.
I have documented this because after reading and searching among many Technical articles and the Microsoft support website, I was unable to find the solution that I came up with so I hope to help someone else.
Question1: - Can anyone tell me why the connectivity only works when 'use default gateway on remote network' is checked?
- I have disabled this option with some business class VPN routers and the connectivity still worked to the remote network but it does not work to the Asus router.
Question2: From the information provided can I determine where the problem lies?
Is it the:
1) Remote client PC
2) Remote client router
3) Home office VPN router (Asus RT-N66U)
If the true culprit cannot be determined yet, what steps do you recommend so I can isolate the true cause of the failure.
I appreciate any help so that I can be sure my solution is valid and pass along the findings to ASUS if it is their issue.

Thank you for the suggestion. I have successfully connected through the VPN router when the one client was unable to get VPN throughput working.
I looked at the routing tables with and without the VPN connection established. The differences are that:
1) when VPN is NOT active, there is a route from the local NIC IP to the Internet IP address of the local gateway
destination 68.109.82.xx
mask 255.255.255.0
gateway 192.168.0.1
interface 192.168.0.11
metric 21
2) when VPN IS active, the route to the Internet IP address of the local gateway is deleted and a persistent route to the VPN router local network has been added
Persistent route:
destination 192.168.21.0
mask 255.255.255.0
gateway 192.168.0.1
interface 192.168.0.11
metric 1

Connections drops with port forwarding

I have a WRT54G v.5 and I recently just set up port forwarding. The problem is that my internet connection drops between every 10 minutes to once an hour. Once I disable port forwarding, the connection works perfectly. Any ideas?

Make sure your router has the latest firmware installed.
Richard Aichner (Ikester)

Internet connection drops with new HH4....

I recently signed up to a new deal with BT and had to pay for my HH4. I have it all connected up the exact same way as my HH3. I am receiving a faster connection now but am now getting VERY frequent internet connection drops....
My PC is wired to the HH so NOT a wireless issue. I have checked ALL my microfilters and seem to be working. Nothing within my home has changed apart from the homehub. I used to be connectiong at around 6.5Mb, I am now connecting between 7.5 and 8Mb....
9 times out of 10 the connection drops when I receive an incoming call.... but not always. I can make outgoing calls with ZERO issues....

Shand359tbe wrote:
I forgot to state also that I since removed the HH4 and put my old trusty HH3 back into use......... it does the EXACT same thing now.........
BT engineer was out to fix the line in February of this year. A new main box was fitted (which I was billed for) and he also fitted an iplate to the box to allow the hub to be connected without the need for a filter since they are built in.......
an Iplate will not do away with any filters and they will be required on all sockets - unless you mean a filtered faceplate not iplate - 2 sockets 1 adls and 1 phone
If you like a post, or want to say thanks for a helpful answer, please click on the Ratings star on the left-hand side of the post.
If someone answers your question correctly please let other members know by clicking on ’Mark as Accepted Solution’.

SRP521 Lan connections drop once wan is connected

I have had this issue on the last 3 srp521's I deployed, all were pulled from service and replaced with a different model. Firmware is 1.1.24 and I also tried on with 1.1.27
With only power and 1 lan connection I start a ping to the router and a ping through it to the DG of the wan ip. When I plug in the wan cable I get a single reply from the wan ip DG and then my lan connection drops. I have to power cycle the router to get it to come back. I have a static set on the WAN and am using 10.10.10.x on the lan side. The link light on the router stays on for both lan and wan.
Any idea on what to look at?

Hi Sage,
I'm not sure that I follow what you mean when you say the WAN goes down as soon as it is connected. Could you provide more detail please? Can you specify what address you are using for the WAN and LAN (with masks).
Also, I'm not sure what you mean by:
I plugged it into the its own switch and it went down as soon as connected
Regards,
Andy

Frequent wireless connection drops: how to re-connect?

My wireless connection has become quite unreliable of late, and I'm not sure how to diagnose/fix the problem. Configuration:
MacBook Pro4,1
Intel Core2 Duo
Max OS X 10.6.6
When the connection drops, I first try to "Turn Airport On" with the menu bar, but this has no effect.
Using Network Preferences to "Turn Aiport On" also has no effect.
Turning to the command line, I try 'ifconfig -a', and get:
en1: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
status: inactive
I tried bouncing the en1 interface using:
ifconfig en1 down
ifconfig en1 up
But the status stays inactive. Any thoughts on what I should try? A reboot always
resets things and gets them working again, but it's incredibly annoying to have to
reboot when in the middle of something.

bangaboo wrote:
My wireless connection has become quite unreliable of late
It might help to reset the connection settings on your Mac using these steps one at a time until the problem is resolved, recognizing that, depending on your problem, not all of these steps will make sense:
1) Use the AirPort menu bar item to turn AirPort off, then on again.
2) Try to select your Wi-Fi network from the AirPort menu.
3) In the Network panel of System Preferences delete the AirPort item from the left column, then add it back.
4) In the same panel as (3), define a new location and see if you can make that work.
5) In the same panel, select the AirPort connection item, click the "Advanced" button, select the "TCP/IP" tab, then click "Renew DHCP Lease".
6) In the folder /Library/Preferences ( not <yourhomefolder>/Library/Preferences), move the folder SystemConfiguration onto the Desktop, then restart your computer. See if you can now make your AirPort connection work.
They may not help, but they'll only take a couple of minutes to try. Before you try these, if you have any special network settings on your Mac for things like DSL credentials, note all your network settings, because the latter steps will destroy them. If you got all the way to the last step, if things don't work any worse than before, you can trash the saved SystemConfiguration folder.

Considerable speed drop with our Infinity connecti...

Hello all,
First time forum user, looking for some advice!
Ok, so we had Infinity installed probably 8 months ago and have been really impressed with the speed. We've consistently gotten very high fifties for our connection, maybe 60mb or so at 2am on a Thursday!
Lately however, our connection has dropped to around 12mb - it also seems hugely inconsistent and at the moment we're unable to buy a movie from iTunes as teh connection seems to clog up almost instantly. This situation has been ongoing for about a month or so. (no hardware or software changes at all in this period)
So far I've tried;
1. Resetting the Modem and Router completely, several times to no avail.
2. Changes wireless channels, seemed to make no difference at all.
3. Checking all connections, no issues (setup has not changed at all since installation)
4. Tested different speed test, BT says around 10-12 - same for ThinkBroadband
Other oddities seem to be a reduced wireless speed around the house, last week transferring stuff between my Mac and NAS was horrendous - what would cause a sudden wireless speed dropoff? Another oddity is a regualr random sign out of the PlayStation network, may or may not be related?
In terms of hardware, I'm running the standard Inifinity setup, with a HH3. We have a number of Apple devices using the connection, and I use Macbook Air - which I mention due to its lack of ethernet port, which seems to be a real showstopping issue last time I called the support desk - basically the chap implied I was unsupportable running a Mac..!
So folks, where on earth do I start with this one!

It could be a faulty Homehub. To try and establish this you will need to use a computer with an Ethernet connection to do this.
Make a direct connection with a computer to the modem which will eliminate the homehub. Follow this guide to do that. Use your computer as normal and run a speed test as per the link http://speedtest.btwholesale.com/ and post the results.
Guide to eliminate Homehub:
Step 1: Remove the homehub from the modem
Step2: Connect your pc/laptop into the modem using LAN1 port
Step3: Open network and sharing centre on windows and click set up a new connection or network
Step4: Connect to the internet then click make a new connection Broadband PPPoE
Step5: Username [email protected] and the password as BT
Step6: connect, If it doesn't,keep pressing try again until it does.

TMG Stops responding every 4 days / many connection drops with idle vpn connections

Similar Messages

Maybe you are looking for