Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 11002 Source: MicrosoftISAServerControl

Level
Description
Microsoft ISA Server Control failed to start.

The failure occurred during Service initialization because the configuration property msFPCSiteName of key LDAP://server.domain.com/CN={Array GUID},CN=Arrays,CN=Fpc,CN=System,DC=domain,DC=com is not valid. Use the source location 114.260.3.0.1200.50 to report the failure. The error code in the Data area of the event properties indicates the cause of the failure. For more information about this event, see ISA server help.

The error description is: The parameter is incorrect.
Comments
 
As per Microsoft: "This problem can occur if the ISACTRL service fails to read the packet-filter configuration (DHCP Client or DNS or ICMP filter), when it tries to convert an empty string (Remote IP Mask attribute) to an IP address". See ME312633 for additional information on this problem.
This issue can occur if you installed ISA Server in Array mode, and the Microsoft Windows 2000 site name that the server belongs to contains lowercase characters. See ME291836 for a solution to this problem.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...