Century IT blog

Firewall service stopped because an application filter module C:\WINDOWS\system32\msvcrt.dll generated an exception code C0000005

October 5th, 2009

You may find you have intermittent Microsoft ISA Firewall crashes on a Microsoft Small Business Server 2003 Premium Edition that has Symantec Endpoint Protection and Symantec Backup Exec Installed.

 

When Symantec Backup Exec is backing up, an event is is displayed in the Application Event Viewer (see below) and users lose connectivity to the SBS 2003 server:-  

Event Type: Error
Event Source: Microsoft Firewall
Event Category: NoneMicrosoft Small Business Specialist
Event ID: 14057
Date: 29/09/2009
Time: 08:32:08
User: N/A
Computer: Server-SBS
Description:
The Firewall service stopped because an application filter module C:\WINDOWS\system32\msvcrt.dll generated an exception code C0000005 in address 77BC6F76 when function CompleteAsyncConnect was called. To resolve this error, remove recently installed application filters and restart the service.For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

 

 

To resolve this problem you will need to add some exceptions to the Symantec Endpoint Protection Manager – Centralized  Exceptions Policies.

Add some exceptions to exclude Microsoft ISA Server data directories from being included in the Symantec Endpoint Realtime Scanning.

 

symantec-endpoint-isa-firewall-errors

Symantec Endpoint Protection Manager Console

 

  

symantec-endpoint-isa-firewall-errors2

Symantec Endpoint Protection - Centralized Exceptions

 

 

symantec-endpoint-isa-firewall-errors4

Symantec Endpoint Protection - Exclude ISA Cache Folder

  

 

 

symantec-endpoint-isa-firewall-errors3

Symantec Endpoint Protection - Add Exception for ISA Log Folder

 

 

 

Century IT Services – Getting IT Right
Providing Computer Support & Network Support to businesses in Hampshire, Dorset, Surrey, Wiltshire, Sussex & Berkshire.