In my new job, since a couple of months ago, the ISA 2006 server stops accepting VPN connections.
Once that happens, we restart it, and it all goes back to normal... for the next 12 hours or so.
I couldn't quite figure out how or why this was happening.
A consultant was stumped with the problem as well.
Yesterday I spent a lot of time just clicking everywhere on the ISA server...
And I think I might have found the problem.
I'm a n00b at this, so please bare with me:
I went to Administrative Tools
--> Routing and Remote Access
--> expanded de ISA server
--> expanded IP Routing
--> clicked on General
--> right click on top of "Internal", which is listed under Interface
IP Address: 192.168.200.1
Administrative Status: Up
Operational Status: Connected
Incoming bytes: 0
Once I right-clicked on Internal, I selected Show TCP Connections.
And there I think is where the problem lies.
I listed everything by "State", and ended up with CLOSE_WAIT on top.
The ports are... running out fast.
When the VPN connection stops working, I check this, and amongst the highest listed ports are 64,5xx
When I reboot the server, the ports start over at the 6,xxx range.
Yet the guy climbs through 1,000 ports in a matter of 5 minutes.
Is this normal?
Is there a way to "release" the ports?
Anything I can check or verify?
Thank you very much for your help... very much appreciated.
Let me know if you would like some additional information in order to help me fix this.