TMG Firewall serivce (wspsrv.exe) crashes because of MiddleMan_x64.dll ( ONLY)

Versions / Builds Affected

2011

Status

Resolved

Problem Summary

The TMG Firewall service keeps crashing as long as the WebMonitor webfilter is enabled in TMG

TT / JIRAID

WEBMON-51

How to Identify

1. It has to be TMG 2. It has to be 2008 R2 3. You will find MiddleMan_x64.dll related error messages in the Eventlogs Example: Faulting application name: wspsrv.exe, version: 7.0.9027.400, time stamp: 0x4c8cade1 Faulting module name: MiddleMan_x64.dll, version: 20110.218.150.25, time stamp: 0x4d5e3311 Exception code: 0xc0000005 Fault offset: 0x00000000000424c9 Faulting process id: 0x19c0 Faulting application start time: 0x01cbe657a876c5d0 Faulting application path: C:\Program Files\Microsoft Forefront Threat Management Gateway\wspsrv.exe Faulting module path: C:\Program Files\Common Files\gfi\common\MiddleMan_x64.dll Report Id: ad0286e0-538c-11e0-85b8-0026b97b879a

Workaround / Fix Details

1. Update to the latest build 3. Perform the following instructions: 1. Navigate into the WebMonitor folder on the command line 2. Run "regsvr32.exe /u middleman_x64.dll" 3. Replace the middleman_x64.dll in the WebMonitor folder with the patched one (a backup of the original might be a good idea) 4. Run "regsvr32.exe middleman_x64.dll" 5. Restart the WebMonitor services and the TMG firewall service

Required Actions

1. Update and applied the fix 2. Attach this article to the case 3. Escalate if issue persists