locked
hi all RRS feed

  • Question

  • can someone help me please?

    Log Name:      Security

    Source:        Microsoft-Windows-Security-Auditing

    Date:          28/07/2011 19:43:01

    Event ID:      4653

    Task Category: IPsec Main Mode

    Level:         Information

    Keywords:      Audit Failure

    User:          N/A

    Computer:      Lisa-PC

    Description:

    An IPsec Main Mode negotiation failed.

     

    Local Endpoint:

    Local Principal Name: -

    Network Address:

    Keying Module Port: 500

     

    Remote Endpoint:

    Principal Name: -

    Network Address:

    Keying Module Port: 500

     

    Additional Information:

    Keying Module Name: IKE

    Authentication Method: Unknown authentication

    Role: Initiator

    Impersonation State: Not enabled

    Main Mode Filter ID: 68526

     

    Failure Information:

    Failure Point: Local computer

    Failure Reason: Negotiation timed out

     

    State: Sent first (SA) payload

    Initiator Cookie: 2cdb96968136553c

    Responder Cookie: 0000000000000000

    Event Xml:

    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

      <System>

        <Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-a5ba-3e3b0328c30d}" />

        <EventID>4653</EventID>

        <Version>0</Version>

        <Level>0</Level>

        <Task>12547</Task>

        <Opcode>0</Opcode>

        <Keywords>0x8010000000000000</Keywords>

        <TimeCreated SystemTime="2011-07-28T18:43:01.112Z" />

        <EventRecordID>15949</EventRecordID>

        <Correlation />

        <Execution ProcessID="684" ThreadID="2708" />

        <Channel>Security</Channel>

        <Computer>Lisa-PC</Computer>

        <Security />

      </System>

      <EventData>

        <Data Name="LocalMMPrincipalName">-</Data>

        <Data Name="RemoteMMPrincipalName">-</Data>

        <Data Name="LocalAddress">

        </Data>

        <Data Name="LocalKeyModPort">500</Data>

        <Data Name="RemoteAddress">

        </Data>

        <Data Name="RemoteKeyModPort">500</Data>

        <Data Name="KeyModName">%%8222</Data>

        <Data Name="FailurePoint">%%8199</Data>

        <Data Name="FailureReason">Negotiation timed out

    </Data>

        <Data Name="MMAuthMethod">%%8194</Data>

        <Data Name="State">%%8202</Data>

        <Data Name="Role">%%8205</Data>

        <Data Name="MMImpersonationState">%%8217</Data>

        <Data Name="MMFilterID">68526</Data>

        <Data Name="InitiatorCookie">2cdb96968136553c</Data>

        <Data Name="ResponderCookie">0000000000000000</Data>

      </EventData>

    </Event>

    Thursday, July 28, 2011 7:22 PM