Unable to start microsoft firewall service on ISA server 2004.

Possible Reasons:-

This issue occurs if the rollback operation is not successful and if the computer contains ISA Server 2004 components from the pre-update version and from ISA Server 2004 SP3.

The most common installation and rollback failures occur in the following scenario:

• You have the ISA Server Management Microsoft Management Console (MMC) snap-in open in a separate Remote Desktop Protocol (RDP) session.
• You use an unattended installation to install ISA Server 2004 SP3. For example, ISA Server 2004 SP3 is installed from the Microsoft Update Web site.

The Microsoft Update installer cannot prompt a user to close the ISA Server Management MMC snap-in. Therefore, the installation fails. Then, it starts a rollback of all changes to this point. If the rollback also fails, the computer will contain ISA Server 2004 components from the pre-update version and from ISA Server 2004 SP3.

How to Solve:-

Method 1: Reinstall ISA Server 2004 SP3

1. Download ISA Server 2004 SP3.
   
   http://technet.microsoft.com/en-us/forefront/edgesecurity/bb734854.aspx

http://www.microsoft.com/en-in/download/details.aspx?id=8836

2. Exit all ISA Server utilities, and then close all ISA Server user interface components. For example, close the ISA Server Management Microsoft Management Console (MMC) snap-in.
3. Exit all other RDP sessions on the server. To do this, follow these steps:

a.       Open Task Manager, and then click the User tab.

b.      Right-click a user account that does not represent your current connection, and then click Log Off.

c.       When you are prompted to verify the action, click Yes.

d.      Repeat steps 3b through 3c for each RDP connection.

                        At a command prompt, type the following command to reinstall ISA Server 2004 SP3, and then press ENTER:

msiexec /p Full_Path_To_SP3_Package REINSTALL=all REINSTALLMODE=omus /l*v c:\sp3.log

Note We recommend that you reinstall ISA Server 2004 SP3 in repair mode.

Method 2: Reregister the ISA Server administration component

1. Click Start, click Run, type cmd, and then press ENTER.
2. At the command prompt, type the following commands. Press ENTER after each command.

cd c:

cd  “%programfiles%”\”microsoft isa server”
regsvr32 wspadmin.dll

3. When you receive the "DllRegisterServer in wspadmin.dll succeeded" message, click OK.
4. At the command prompt, type the following commands. Press ENTER after each command.

md VPN\Netsh
net start fwsrv

Other Possible Error:-

When try to start firewall service by using net start fwsrv command it may show the following error:- Unable to start Firewall service Error Code 212994.

Cause: - ISA Services/Firewall Service do not start if they are unable to create log file.

To resolve this issue, verify that the ODBC DSN is configured correctly and the database is accessible:

1. In the ISA Management MMC, expand the ISA Server computer, expand "Monitoring Configuration," and then click Logging. The "Packet Filters" component corresponds to the "Microsoft ISA Server Control service". The "ISA Server Firewall service" corresponds to the "Microsoft Firewall" service. The "ISA Server Web Proxy Service" corresponds to the "Microsoft Web Proxy" service.

2. Right-click the appropriate component and then click Properties. Verify that the Database section is using a valid DSN, and that the DSN is set up correctly.

Verify that the Use this account box contains a valid database account, that is, a Windows NT account that has permissions to log on to the database.

Windows NT authentication in the DSN, you do not have to fill out the Use this account box with a user name and password

3. If you are importing configuration from a old ISA server verify the log location. Right-click the appropriate component and then click Properties. In Options verify the log location and make the exact same location to create log files.