Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1000 Source: MicrosoftISAServer2004

Level
Description
Faulting application <application> version <version> stamp <stamp> faulting module <module> version <module version> stamp <stamp> debug 0 fault address <fault address>.
Comments
 
See ME912928, ME916152, ME917718, ME919515, ME923765, ME937028 and ME937258 for information about this event.
- Application: wspsrv.exe, module: w3filter.dll - The firewall service started but stopped again after about 30 seconds. I deleted the cache file and the service started normally.
From a newsgroup post: "I found the reason to why this happens. It was a 3rd party application patch named "Surfcontrol webfilter" that was causing ISA 2004 firewall sp2 to stop, but as Surfcontrol is more important to me then sp2, i uninstalled sp2 from my servers and everything came back to normal".

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...