Skip to main content
Windows security encyclopedia
#microsoft #windows #security
Search form
Search this site
You are here
Windows event ID encyclopedia
»
System
IPsec Driver
Policy path:
Computer Configuration\Windows Settings\Advanced Audit Policy Configuration\System
Related content
Navigation
Microsoft security bulletins
Windows event ID encyclopedia
Account Logon
Account Management
DS Access
Detailed Tracking
Logon/Logoff
Object Access
Policy Change
Privilege Use
System
IPsec Driver
Windows event ID 4960 - IPsec dropped an inbound packet that failed an integrity check. If this problem persists, it could indicate a network issue or that packets are being modified in transit to this computer. Verify that the packets sent from the remot
Windows event ID 4961 - IPsec dropped an inbound packet that failed a replay check. If this problem persists, it could indicate a replay attack against this computer
Windows event ID 4962 - IPsec dropped an inbound packet that failed a replay check. The inbound packet had too low a sequence number to ensure it was not a replay
Windows event ID 4963 - IPsec dropped an inbound clear text packet that should have been secured. This is usually due to the remote computer changing its IPsec policy without informing this computer. This could also be a spoofing attack attempt
Windows event ID 4965 - IPsec received a packet from a remote computer with an incorrect Security Parameter Index (SPI). This is usually caused by malfunctioning hardware that is corrupting packets. If these errors persist, verify that the packets sent fr
Windows event ID 5478 - IPsec Services has started successfully
Windows event ID 5479 - IPsec Services has been shut down successfully. The shutdown of IPsec Services can put the computer at greater risk of network attack or expose the computer to potential security risks
Windows event ID 5480 - IPsec Services failed to get the complete list of network interfaces on the computer. This poses a potential security risk because some of the network interfaces may not get the protection provided by the applied IPsec filters. Use
Windows event ID 5483 - IPsec Services failed to initialize RPC server. IPsec Services could not be started
Windows event ID 5484 - IPsec Services has experienced a critical failure and has been shut down. The shutdown of IPsec Services can put the computer at greater risk of network attack or expose the computer to potential security risks
Windows event ID 5485 - IPsec Services failed to process some IPsec filters on a plug-and-play event for network interfaces. This poses a potential security risk because some of the network interfaces may not get the protection provided by the applied IPs
Other System Events
Security State Change
Security System Extension
System Integrity
Other
Windows group policy encyclopedia
Windows services encyclopedia
