I have IIS running 5 websites with different app pools on a Windows 2012 server. One of the sites became unresponsive. Checking IISLogs for that site there is no record of traffic during that time. The last log entry for the unresponsive site was normal "200". The other sites show traffic and were responding fine according to their respective logs. There is nothing in front of the web server that would block traffic to one site only. All sites require SSL. IISRESET fixed the problem.
I am trying to do root cause analysis. Does the fact that traffic was not recorded in IIS log point to the component that failed?
I checked event log and cannot find related event at the time of failure. I did find "A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 10. The Windows SChannel error state is 1203." But that was 10 minutes after the failure started. I am guessing the SChannel failure was result of something, not the cause of the original failure.
0 Answers