detection.wiki

Microsoft-Windows-NAPIPSecEnf

EventTitleChannelSampleRule
1NAP IPSec Relying Party initialized successfullyOperationalNN
2NAP IPSec Relying Party uninitialized successfullyOperationalNN
3NAP IPSec Relying Party has added IPSec policy to the machine.OperationalNN
4NAP IPSec Relying Party has removed IPSec policy from the machine.OperationalNN
6NAP IPSec Relying Party has deleted all health-associated security associations.OperationalNN
3221225477An error occured while NAP IPSec Relying Party was adding IPSec policy.OperationalNN

Event ID 1: NAP IPSec Relying Party initialized successfully

#
Channel
Operational

Event ID 2: NAP IPSec Relying Party uninitialized successfully

#
Channel
Operational

Event ID 3: NAP IPSec Relying Party has added IPSec policy to the machine.

#
Channel
Operational

Event ID 4: NAP IPSec Relying Party has removed IPSec policy from the machine.

#
Channel
Operational

Event ID 6: NAP IPSec Relying Party has deleted all health-associated security associations.

#
Channel
Operational

Event ID 3221225477: An error occured while NAP IPSec Relying Party was adding IPSec policy.

#
Channel
Operational