Ipsecmon.exe May Display Incorrect Information (256284)
The information in this article applies to:
- Microsoft Windows 2000 Server
- Microsoft Windows 2000 Advanced Server
- Microsoft Windows 2000 Professional
This article was previously published under Q256284 SYMPTOMS
When you use the IP Security Monitor (Ipsecmon.exe) tool on the Responder side of an IP Security Protocol (IPSec) connection to view information about a security association (SA), the Main-mode SA information that is displayed may be incorrect.
CAUSE
This problem can occur because the Internet Key Exchange (IKE) protocol incorrectly audits a Main-mode SA and increments the Main-mode counter on the Responder side of an IPSec negotiation before the creation of the ID payload on the Responder side succeeds. Also, the Main-mode counter is incremented even if the SA does not succeed.
STATUSMicrosoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article. MORE INFORMATION
IKE audits a Main-mode SA a second time after the creation of the ID payload, generating two Main-mode SA audit messages in the Event log on the Responder side of an IPSec connection.
| Modification Type: | Major | Last Reviewed: | 11/13/2003 |
|---|
| Keywords: | kbprb KB256284 |
|---|
|