Sign in
 
HomeProductsLibraryLearnDownloadsSupportForums
Microsoft Forefront TechCenter >
> 
> 
Firewall Service cannot be Started

Answered Firewall Service cannot be Started

  • Thursday, January 10, 2013 1:41 AM
     
     
    Sign In to Vote
    0

    Hi,

    We have a server with Windows 2008 R2 Standard, Installed is Forefront TMG 2010 Standard Patched up to Service Pack 2 RU 2. The server right now displaying the following errors if I try to start the Firewall Service: -

    Windows could not start the Microsoft Forefront TMG Firewall on the local computer.  For more information, review the system event log.  If this is a non-microsoft service, contact the service vendor, and refer to service-specific error code 87.

    And if we start from inside of the Forefront TMG we get the following error - The service could not be started.

    Upon checking event viewer the following errors were observed:-

    Event ID: 14001
    Firewall Service failed to initialize. Previous event log entries might help determine the proper action.

    Event ID: 23486
    The Microsoft Forefront TMG Firewall Service failed to start because the definitions for malware inspection could not be loaded from the folder {50360AED-9420-42C5-8F8A-C3E280473AB0}. To correct this issue, set the data in all the values under the registry key SOFTWARE\Microsoft\Fpc\EmpScanner\Versions to "0.0.0.0", update the malware inspection definitions in the Update Center, and start the Microsoft Forefront TMG Firewall Service

    The steps above were tried to no avail.

    The server has no 3rd party software installed and it is used to publish OWA for an exchange server which is currently offline because of the firewall service not started.

    Any ideas? We thank you.

     

All Replies

  • Thursday, January 10, 2013 1:22 PM
     
     
    Sign In to Vote
    0

    Did the update of the definitions work?

    Otherwise, delete the folder containing the definitions along with resetting the reg-entry if it has been updated.

    Hth, Anders Janson Enfo Zipper

     
  • Friday, January 11, 2013 4:49 AM
     
     
    Sign In to Vote
    0

    Thanks for the reply.

    No the update of the definitions did not work. 

    Just tried to deleting the folder containing the definitions as well as I reset the reg-entry. No luck on either fronts :(

    The reg-entry does not update as well.


     
  • Friday, January 11, 2013 8:54 AM
     
     
    Sign In to Vote
    0
    What happens if you disable malware inspection? Can you restart the FW service then?

    Hth, Anders Janson Enfo Zipper

     
  • Friday, January 11, 2013 8:59 AM
     
     
    Sign In to Vote
    0

    Thanks for the reply.

    Forgot to mention I tried that as well. Tried disabling malware inspection and the NIS. Same error when trying to enable the FW service i.e. The service could not be started.

    Even tried restarting the server as well after disabling them both.

     
  • Monday, January 14, 2013 8:20 AM
     
     
    Sign In to Vote
    0

    As the above doesn't work, I would recommend that you contact Microsoft Support and get their assistance on this.

    The above are the "common way" to solve this, I haven't come across an issue (until now...) where this has not helped. Sorry I cannot be of further assistance.

    Hth, Anders Janson Enfo Zipper

     
  • Tuesday, January 15, 2013 1:46 PM
     
     
    Sign In to Vote
    0

    Thanks very much appreciated. Will let you know the outcome.

     
  • Friday, January 25, 2013 1:23 PM
     
     
    Sign In to Vote
    0

    Hello,

    Has there been any outcome ? I have the same situation with a client's server.

    Michael Jenkin (Mickyj) www.mickyj.com (Community website) - SBS MVP (2004 - 2008) *5 times Microsoft MVP award winner *Previously MacWorld Australia contributer *Previously APAC Vice Chairman Culminis (Pro IT User group support system)* APAC chairman GITCA *Director Business Technology Partners, Microsoft Small Business Specialist, SMB150 2012 Member

     
  • Friday, January 25, 2013 1:34 PM
     
     
    Sign In to Vote
    0

    Hi I was advised to create another VM and import configuration from the existing TMG. Currently working on that.

     
  • Friday, January 25, 2013 1:41 PM
     
     
    Sign In to Vote
    0

    Wow, In my case that is a lot of work.

    I also tried downloading and installing the latest Malware updates from here http://catalog.update.microsoft.com/v7/site/Search.aspx?q=malware

    Michael Jenkin (Mickyj) www.mickyj.com (Community website) - SBS MVP (2004 - 2008) *5 times Microsoft MVP award winner *Previously MacWorld Australia contributer *Previously APAC Vice Chairman Culminis (Pro IT User group support system)* APAC chairman GITCA *Director Business Technology Partners, Microsoft Small Business Specialist, SMB150 2012 Member

     
  • Friday, January 25, 2013 1:42 PM
     
     
    Sign In to Vote
    0

    Same here. Hence why it has not been done as yet. I also tried to do that with no luck.

    :(

     
  • Friday, January 25, 2013 2:24 PM
     
     Answered
    Sign In to Vote
    0

    Just got ourselves back online.

    Removed the subfolder GUID folder in the Program Files (mpengine\{50360AED-9420-42C5-8F8A-C3E280473AB0)

    Registry removed node - SOFTWARE\Microsoft\Fpc\EmpScanner\Versions  (Deleted everything below EmpScanner)

    Disabled Malware on any http rules, dissabled NIS

    Repair installation of TMG

    Restarted services, back up and running. Now I just need to test a reboot. Fingers crossed.

    Michael Jenkin (Mickyj) www.mickyj.com (Community website) - SBS MVP (2004 - 2008) *5 times Microsoft MVP award winner *Previously MacWorld Australia contributer *Previously APAC Vice Chairman Culminis (Pro IT User group support system)* APAC chairman GITCA *Director Business Technology Partners, Microsoft Small Business Specialist, SMB150 2012 Member

    • Marked As Answer by trhaict Saturday, January 26, 2013 12:02 AM
    •  
     
  • Friday, January 25, 2013 2:58 PM
     
     
    Sign In to Vote
    0
    After a reboot, we are up and running.

    Michael Jenkin (Mickyj) www.mickyj.com (Community website) - SBS MVP (2004 - 2008) *5 times Microsoft MVP award winner *Previously MacWorld Australia contributer *Previously APAC Vice Chairman Culminis (Pro IT User group support system)* APAC chairman GITCA *Director Business Technology Partners, Microsoft Small Business Specialist, SMB150 2012 Member

     
  • Saturday, January 26, 2013 12:02 AM
     
     
    Sign In to Vote
    0

    Wow and that worked!!!

    Thanks a lot Mickyj!

     
  • Saturday, January 26, 2013 12:51 AM
     
     
    Sign In to Vote
    0
    Not a problem. Looks like we both broke new ground on this one. We are migrating 280 users in 23 locations this weekend and this was the last issue we needed in such a high tension project :)

    Michael Jenkin (Mickyj) www.mickyj.com (Community website) - SBS MVP (2004 - 2008) *5 times Microsoft MVP award winner *Previously MacWorld Australia contributer *Previously APAC Vice Chairman Culminis (Pro IT User group support system)* APAC chairman GITCA *Director Business Technology Partners, Microsoft Small Business Specialist, SMB150 2012 Member