FIX: The Forefront Threat Management Gateway Firewall service (Wspsrv.exe) may crash frequently for a published website secured by SSL after you install Service Pack 2

Here’s a new Knowledge Base article we published recently. This one talks about a fix for an issue where the TMG 2010 firewall service crashes frequently and logs an Event ID 14057.

=====

Symptoms

Consider the following scenario:

• You install Service Pack 2 (SP2) for Microsoft Forefront Threat Management Gateway 2010.
• You use Forefront Threat Management Gateway to publish a secure website by using Secure Sockets Layer (SSL).

In this scenario, the Forefront Threat Management Gateway Firewall service (Wspsrv.exe) may crash frequently. When this problem occurs, you may find that the following event is logged in the Application log:

Source: Microsoft Forefront TMG Firewall
Event ID: 14057
Description:
The Firewall service stopped because an application filter module C:\Program Files\Microsoft Forefront Threat Management Gateway\w3filter.dll generated an exception code C0000005 in address 000000007043254F when function CompleteAsyncIO was called. To resolve this error, remove recently installed application filters and restart the service.

Cause

This issue occurs because of a known problem that was introduced by Service Pack 2 for Forefront Threat Management Gateway 2010.

Resolution

To resolve this issue, install the hotfix package that is described in the following Microsoft Knowledge Base article:

2649961 Rollup 1 for Forefront Threat Management Gateway (TMG) 2010 Service Pack 2

Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

=====

For the most current version of this article please see the following:

2658903 - FIX: The Forefront Threat Management Gateway Firewall service (Wspsrv.exe) may crash frequently for a published website secured by SSL after you install Service Pack 2

J.C. Hornbeck | Knowledge Engineer | Management and Security Division

Get the latest System Center news on Facebook and Twitter :

App-V Team blog: http://blogs.technet.com/appv/
ConfigMgr Support Team blog: http://blogs.technet.com/configurationmgr/
DPM Team blog: http://blogs.technet.com/dpm/
MED-V Team blog: http://blogs.technet.com/medv/
Orchestrator Support Team blog: http://blogs.technet.com/b/orchestrator/
Operations Manager Team blog: http://blogs.technet.com/momteam/
SCVMM Team blog: http://blogs.technet.com/scvmm
Server App-V Team blog: http://blogs.technet.com/b/serverappv
Service Manager Team blog: http://blogs.technet.com/b/servicemanager
System Center Essentials Team blog: http://blogs.technet.com/b/systemcenteressentials
WSUS Support Team blog: http://blogs.technet.com/sus/

The Forefront Server Protection blog: http://blogs.technet.com/b/fss/
The Forefront Endpoint Security blog : http://blogs.technet.com/b/clientsecurity/
The Forefront Identity Manager blog : http://blogs.msdn.com/b/ms-identity-support/
The Forefront TMG blog: http://blogs.technet.com/b/isablog/
The Forefront UAG blog: http://blogs.technet.com/b/edgeaccessblog/