Knowledge Base

Event Viewer Reports That IP Security Is Receiving Unencrypted Traffic

Article ID: 259591

Article Last Modified on 2/21/2007

APPLIES TO

Microsoft Windows 2000 Server
Microsoft Windows 2000 Advanced Server
Microsoft Windows 2000 Professional Edition

This article was previously published under Q259591

SYMPTOMS

Event Viewer may report the following event:

Event ID: 4284
Source: IPSec
Received n packet(s) in the clear from IP address which should have been secured. This could be a temporary glitch; if it persists please stop and restart the IPSec Policy Agent service on this machine.

CAUSE

The IP Security (IPSec) driver is receiving broadcast packets from the TCP/IP driver. IPSec is only for unicast traffic and should not be receiving broadcast traffic. The broadcast traffic is not encrypted and causes the IPSec driver to log an event about the packet being in the clear instead of being secured.

RESOLUTION

To resolve this problem, obtain the latest service pack for Windows 2000. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

260910 How to Obtain the Latest Windows 2000 Service Pack

STATUS

Microsoft has confirmed that this is a problem in Microsoft Windows 2000. This problem was first corrected in Windows 2000 Service Pack 1.

Keywords: kbbug kberrmsg kbfix kbipsec kbqfe kbwin2000sp1fix KB259591

Microsoft KB Archive/259591

Contents