Event ID: 4983

An IPsec extended mode negotiation failed

An IPsec extended mode negotiation failed. The corresponding main mode security association has been deleted.


Local Endpoint:
    Principal Name:     %1
    Network Address:    %9
    Keying Module Port: %10

Local Certificate:
    SHA Thumbprint: %2
    Issuing CA:     %3
    Root CA:        %4

Remote Endpoint:
    Principal Name:     %5
    Network Address:    %11
    Keying Module Port: %12

Remote Certificate:
    SHA Thumbprint: %6
    Issuing CA:     %7
    Root CA:        %8

Additional Information:
    Keying Module Name: AuthIP
    Authentication Method:  SSL
    Role:           %16
    Impersonation State:    %17
    Quick Mode Filter ID:   %18

Failure Information:
    Failure Point:      %13
    Failure Reason:     %14
    State:          %15



Lookup Audit Policy Configuration Settings

C:\> AuditPol.exe /get /subcategory:"IPsec Extended Mode"
How to enable Windows Auditing



LEFT/RIGHT arrow keys for navigation

Back to List