Registrations are now open. Join us today!
There is still a lot of work to do on the wiki yet! More information about editing can be found here.
Already have an account?

Microsoft KB Archive/256284

From BetaArchive Wiki
Knowledge Base


PSS ID Number: 256284

Article Last Modified on 11/13/2003



The information in this article applies to:

  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Professional



This article was previously published under Q256284

SYMPTOMS

When you use the IP Security Monitor (Ipsecmon.exe) tool on the Responder side of an IP Security Protocol (IPSec) connection to view information about a security association (SA), the Main-mode SA information that is displayed may be incorrect.

CAUSE

This problem can occur because the Internet Key Exchange (IKE) protocol incorrectly audits a Main-mode SA and increments the Main-mode counter on the Responder side of an IPSec negotiation before the creation of the ID payload on the Responder side succeeds. Also, the Main-mode counter is incremented even if the SA does not succeed.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.

MORE INFORMATION

IKE audits a Main-mode SA a second time after the creation of the ID payload, generating two Main-mode SA audit messages in the Event log on the Responder side of an IPSec connection.

Keywords: kbprb KB256284
Technology: kbwin2000AdvServ kbwin2000AdvServSearch kbwin2000Pro kbwin2000ProSearch kbwin2000Search kbwin2000Serv kbwin2000ServSearch kbWinAdvServSearch