The IPSec Policy Agent may log EventID 156 in the System log of the client computer after you update an IPsec policy in Windows 2000 (886188)



The information in this article applies to:

  • Microsoft Windows 2000 Professional
  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Datacenter Server

SYMPTOMS

In Microsoft Windows 2000, after you update an IPsec policy, the IPSec Policy Agent may log the following event in the System log of the client computer:Source: PolicyAgent
EventID: 156
Description: Matching filter exists in filter list.This problem may occur when the following conditions are true:
  • You change a security rule's filter action. For example, you change the filter action from Request Security to Require Security.
  • You update the rule's IP filter list.
  • You perform these two operations at the same time for the same rule.

WORKAROUND

To work around this problem, do not perform the two operations that are mentioned in the "Symptoms" section at the same time. For example, first change the rule's filter action. Then, after the client computer updates the IPsec policy, update the rule's IP filter list.

Modification Type:MajorLast Reviewed:1/27/2005
Keywords:kbtshoot kbprb KB886188 kbAudDeveloper