mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-20 04:43:37 +00:00
37 lines
2.1 KiB
Markdown
37 lines
2.1 KiB
Markdown
---
|
|
title: Audit IPsec Quick Mode
|
|
description: The policy setting, Audit IPsec Quick Mode, decides if audit events are generated for the results of the IKE protocol and AuthIP during Quick Mode negotiations.
|
|
ms.assetid: 7be67a15-c2ce-496a-9719-e25ac7699114
|
|
ms.reviewer:
|
|
manager: aaroncz
|
|
ms.author: vinpa
|
|
ms.pagetype: security
|
|
ms.prod: windows-client
|
|
ms.mktglfcycl: deploy
|
|
ms.sitesec: library
|
|
ms.localizationpriority: none
|
|
author: vinaypamnani-msft
|
|
ms.date: 09/06/2021
|
|
ms.technology: itpro-security
|
|
ms.topic: reference
|
|
---
|
|
|
|
# Audit IPsec Quick Mode
|
|
|
|
|
|
Audit IPsec Quick Mode allows you to audit events generated by Internet Key Exchange protocol (IKE) and Authenticated Internet Protocol (AuthIP) during Quick Mode negotiations.
|
|
|
|
Audit IPsec Quick Mode subcategory is out of scope of this document, because this subcategory is mainly used for IPsec Quick Mode troubleshooting.
|
|
|
|
| Computer Type | General Success | General Failure | Stronger Success | Stronger Failure | Comments |
|
|
|-------------------|-----------------|-----------------|------------------|------------------|----------|
|
|
| Domain Controller | IF | IF | IF | IF | IF - This subcategory is mainly used for IPsec Quick Mode troubleshooting, or for tracing or monitoring IPsec Quick Mode operations. |
|
|
| Member Server | IF | IF | IF | IF | IF - This subcategory is mainly used for IPsec Quick Mode troubleshooting, or for tracing or monitoring IPsec Quick Mode operations. |
|
|
| Workstation | IF | IF | IF | IF | IF - This subcategory is mainly used for IPsec Quick Mode troubleshooting, or for tracing or monitoring IPsec Quick Mode operations. |
|
|
|
|
- 4977(S): During Quick Mode negotiation, IPsec received an invalid negotiation packet. If this problem persists, it could indicate a network issue or an attempt to modify or replay this negotiation.
|
|
|
|
- 5451(S): An IPsec Quick Mode security association was established.
|
|
|
|
- 5452(S): An IPsec Quick Mode security association ended.
|