I have an ISA 2006 Server which run for 5 years without any problem. As the hardware is getting old now I have decided to change the Hardware to a new server but was unable due to the hardware to install Server 2003 which ISA runs only on this one as it is 32-bit. I then decided to install server 2008 R2 and install isa 2006 on a vm. Installed all updates patches on server 2008 and the 2003 running on VM, SP1 for ISA.

Everything went fine, transferred the rules and Exchange and everything works fine.  However, every day, two days three days, very randomly and no systematically timeframe isa 2006 wspsrv.exe get a 99% high cpu load and then the service makes the internet to stop.  No internet access anymore, no ping by name or IP.  Rebooting the server fixes that problem until it happens again.  It also happens during different time when people are working or even during the weekend when noone is working on the system.

I have no idea anymore what I could do next.  ISA is the only thing installed on the Server

Any help would be appreciated

Hi,

The blog analyzed a scenario that the high CPU is caused by the third party driver. You could refer to the steps in the blog to troubleshoot this issue.

Quote:

What we can conclude here is that we have a condition where wspsrv.exe was allocating more and more threads without releasing resources (releasing threads) because it was getting stuck waiting for an answer from kernel driver. Some threads were working on I/O, mainly socket and LRPC call (almost socket) that run in Kernel mode. The third party driver is causing every AFD call to take more time and more CPU cycles, the fact that ISA is extremely using sockets amplify the problem. The third party kernel driver was uninstalled from ISA Server and the issue was resolved.

ISA Firewall Service Process (wspsrv.exe) high CPU utilization issue

Best Regards,

Joyce