Event ID:
5452
Category:
Logon/Logoff
Subcategory:
IPsec Quick Mode
Supported on:
Windows Vista, Windows Server 2008
An IPsec Quick Mode security association ended.
Local Endpoint:
 Network Address: %1
 Port:   %2
 Tunnel Endpoint:  %3
Remote Endpoint:
 Network Address: %4
 Port:   %5
 Tunnel Endpoint:  %6
Additional Information:
 Protocol:  %7
 Quick Mode SA ID: %8
 Virtual Interface Tunnel ID: %9
 Traffic Selector ID: %10
Note: Virtual Interface Tunnel ID and Traffic Selector ID data is available only on computers running Windows Server 2008 R2 or Windows 7.
