Windows Server - "Windows firewall cannot run because another program or service is

Asked By Interner on 03-Sep-08 10:13 PM
SBS 2003 with 2 Nics gives this error when trying to see if a firewall is
running.

that might use the network address translation component" (Ipnat.sys)

So the question is:  If NAT is running is there a firewall of any sort being
provided?
And a second ? is:  Why would there be no positive Google hits for this
error from any official Micosoft support site?
--
I''''m clicking as fast as I can!




Russ \(www.SBITS.Biz\) replied on 03-Sep-08 10:50 PM
You are in NAT Mode with 2NICS

What exactly are you trying to do?

Russ

--
Russell Grover - SBITS.Biz
Microsoft Gold Certified Partner
Microsoft Small Business Specialist
World Wide Remote SBS2003 Support - http://www.SBITS.Biz
stephen replied on 04-Sep-08 04:02 AM
RRAS is providing NAT and firewall services. (Unless this is Premium
with ISA).


Pass.

--
stephen
v-milel replied on 04-Sep-08 06:46 AM
Hello,

Thank you for posting here.

According to your description, I understand that:

You have a concern about the error "Windows firewall cannot run because
another program or service is running that might use the network address
translation component" (Ipnat.sys)" when trying to enable the Windows
Firewall service on the SBS 2003 server.

If I have misunderstood the problem, please don't hesitate to let me know.

Explanations:
=============
Yes, you have 2 NICs scenarios that the NAT is enabled on the SBS 2003
server external NIC in RRAS (or ISA). The NAT driver (Ipnat.sys) provides
the network address translation function. It is used by RRAS and Windows
Firewall (or ICS). However, once you enable the NAT in the RRAS, the
Ipnat.sys will be occupied and Windows Firewall cannot start properly. That
explains the error message " Windows firewall cannot run because another
program or service is running that might use the network address
translation component" (Ipnat.sys)".


Hope this helps. Also, if you have any questions or concerns, please do not
hesitate to let me know.



Best regards,
Miles Li

Microsoft Online Partner Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
Interner replied on 05-Sep-08 04:59 PM
The question is:
If NAT is running is there a firewall of any sort being
provided?
Several replies all skirt answering the question. I just want to know  if I
have a server that is protected if I'm using 2 Nics...and ran the IECW wizard
and configured the nics accordingly. If NAT is running, does it provide any
firewalling.
Much appreciation to all replies...skirted or otherwise.
-- ---------sos----------------
I''''m clicking as fast as I can!
Interner replied on 05-Sep-08 05:08 PM
Thanks...so I can assume that there is firewall protection. How can I verify
this with Server Manager on SBS 2003. I cannot find any references to
firewalling there...
Sorry if I don't take your word for it, but since I get the error that
thx..
--
I''''m clicking as fast as I can!
Interner replied on 05-Sep-08 05:42 PM
Thanks...but my question is simply...is there any firewall protection when
using NAT? I'm still not sure. Am I being paranoid? Sorry.
thx....
--
I''''m clicking as fast as I can!
Marina Roos [SBS-MVP] replied on 05-Sep-08 05:51 PM
Hi,

If you are having two nics in the server, you have the basic NAT/Firewall
running. In the RRAS mmc you can see that.
The Windows Firewall Service should never run on SBS and is by default set
to disabled. So the Windows Firewall icon in the Control Panel will not work
and give you the error.
If you only have one nic in the server, you will have to use a hardware
firewall.

--
Regards,

Marina Roos
Microsoft SBS-MVP
One of the Magical M&M's
www.smallbizserver.net
Take part in SBS forum: http://www.smallbizserver.net/Default.aspx?tabid=53
Russ \(www.SBITS.Biz\) replied on 06-Sep-08 01:40 PM
This may help you
http://harrybrelsford.wordpress.com/2008/07/13/sbs-2003-natbasic-firewall-built-in-chapter-5-excerpt/

Russ

--
Russell Grover - SBITS.Biz
Microsoft Gold Certified Partner
Microsoft Small Business Specialist
World Wide Remote SBS2003 Support - http://www.SBITS.Biz
Flashpoint Gol replied on 10-Nov-08 10:36 AM
I am having the same problem and its NOT because of Routing and Remote
Access having NAT enabled unless Routign and Remote Access is messed up. I
put NAT back on and then off of Routing and Remote Access, refreshed, and
then restarted. It still says that. I'm just trying to do a little assignment
for 70-293 and its become this big thing...
Marina Roos [SBS-MVP] replied on 10-Nov-08 10:49 AM
By default the Windows Firewall Service is set to disabled and thus not
running. Please check in the services applet that this service is set to
disabled.

--
Regards,

Marina Roos
Microsoft SBS-MVP
One of the Magical M&M's
www.smallbizserver.net
Take part in SBS forum: http://www.smallbizserver.net/Default.aspx?tabid=53
gadgets906 replied to Interner on 22-Nov-09 06:08 PM
Running SB 2003 two nic cards as a router, firewall enabled through
rras, have vnc installed and was working remotely until recent microsoft
update.  now when attempting to configure vnc, error message appears
stating firewall need to have exception for program vnc. Could really
use some advise as to where to make the exception and add the necessary
ports?


--
gadgets906
------------------------------------------------------------------------
gadgets906's Profile: http://forums.techarena.in/members/157213.htm
View this thread: http://forums.techarena.in/small-business-server/1032119.htm

http://forums.techarena.in