Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 11011 Source: MicrosoftFirewall

Level
Description
Microsoft Firewall failed. The failure occurred during Initialization of Network Address Translation (NAT)  because the system call PNATInit failed. Use the source location 308.1151.3.0.1200.166 to report the failure. The error code in the Data area of the event properties indicates the cause of the failure. This failure may be due to the Internet Connection Firewall (ICF) service being enabled. If it is enabled, please disable the service named "Internet Connection Firewall (ICF) / Internet Connection Sharing (ICS)" (SharedAccess). Then, restart the computer. For more information about this event, see ISA Server Help. The error description is: <error description>
Comments
 
- Error description: "The system cannot find the file specified" - See ME813915 to fix this error.
Error description: "The parameter is incorrect." - From a newsgroup post: "Disable RRAS and see if the problem stops. ISA NAT and RRAS NAT can't coexist on the same server. If you need incoming VPN, then configure that through ISA Network Configuration, VPN Wizards. That way, ISA and RRAS can coexists peacefully."

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...