<div>
Please also see <a href="http://support.microsoft.com/kb/870910" rel="ugc nofollow">http://support.microsoft.com/kb/870910</a><br />
<br />
Jeff<br />
TechSoEasy
</div>


<div>
The steps in that article are exactly the same as the one we had previously followed, while these steps resolve the specific incident, they do not help us determine what is causing the corruption to the IPSEC policy or prevent it from continuing to happen.<br />
<br />
Thanks,<br />
Matt
</div>


<div>
Use this registry key to &quot;bypass&quot; block mode.<br />
<br />
HKEY_LOCAL_MACHINE\SYSTEM\<wbr />CurrentCon<wbr />trolSet\Se<wbr />rvices\IPS<wbr />ec<br />
Value name: OperationMode<br />
Value type: REG_DWORD<br />
Value data: 1=turn on Block mode (bad) 0=bypass Block mode aka prevent block mode.
</div>


<div>
<div class="content wysiwyg-content">
We're getting IPSEC error 4292 in the system log on a server. &nbsp;The issue is intermittent. &nbsp;Always a manual reboot of the server will fix it. &nbsp;We have followed the instructions of the microsoft article <a href="http://support.microsoft.com/kb/912023" rel="ugc">http://support.microsoft.com/kb/912023</a>, which appeared to solve the issue for a couple of days, but the problem has now returned. &nbsp;<br />
<br />
Attempts to replicate the issue by rebooting the server using the nightly reboot schedule have been unsuccessful, so we have been unable to recreate the issue on demand to troubleshoot. &nbsp;Any suggestions are welcome.<br />
<br />
Thanks,<br />
Matt
</div>
</div>


We're getting IPSEC error 4292 in the system log on a server.  The issue is intermittent.  Always a manual reboot of the server will fix it.  We have followed the instructions of the microsoft article http://support.microsoft.com/kb/912023, which appeared to solve the issue for a couple of days, but the problem has now returned.  

Attempts to replicate the issue by rebooting the server using the nightly reboot schedule have been unsuccessful, so we have been unable to recreate the issue on demand to troubleshoot.  Any suggestions are welcome.

Thanks,
Matt

Please also see http://support.microsoft.com/kb/870910

Jeff
TechSoEasy

The steps in that article are exactly the same as the one we had previously followed, while these steps resolve the specific incident, they do not help us determine what is causing the corruption to the IPSEC policy or prevent it from continuing to happen.

Thanks,
Matt

Use this registry key to &quot;bypass&quot; block mode.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IPSec
Value name: OperationMode
Value type: REG_DWORD
Value data: 1=turn on Block mode (bad) 0=bypass Block mode aka prevent block mode.

IPSEC Service Fails and switches to block mode

We&#39;re getting IPSEC error 4292 in the system log on a server.  The issue is intermittent.  Always a manual reboot of the server will fix it.  We have followed the instructions of the microsoft article http://support.microsoft.com/kb/912023, which appeared to solve the issue for a couple of days, but the problem has now returned.  

Attempts to replicate the issue by rebooting the server using the nightly reboot schedule have been unsuccessful, so we have been unable to recreate the issue on demand to troubleshoot.  Any suggestions are welcome.

Thanks,
Matt

Internet Protocol Security (IPsec) is a protocol suite for secure Internet Protocol (IP) communications by authenticating and encrypting each IP packet of a communication session. IPsec includes protocols for establishing mutual authentication between agents at the beginning of the session and negotiation of cryptographic keys to be used during the session. IPsec can be used in protecting data flows between a pair of hosts (host-to-host), between a pair of security gateways (network-to-network), or between a security gateway and a host (network-to-host). IPsec is an end-to-end security scheme operating in the Internet Layer of the Internet Protocol Suite.

Internet Protocol Security

Windows Server 2003 was based on Windows XP and was released in four editions: Web, Standard, Enterprise and Datacenter. It also had derivative versions for clusters, storage and Microsoft’s Small Business Server. Important upgrades included integrating Internet Information Services (IIS), improvements to Active Directory (AD) and Group Policy (GP), and the migration to Automated System Recovery (ASR).

Windows Server 2003

Small Business Server (SBS) is a line of server operating systems targeted at small businesses by bundling the operating system with a number of other Microsoft products that would normally need to be purchased or licensed separately. The most notable inclusions are Exchange, SQL Server, SharePoint and ISA/TMG (Microsoft's firewall and proxy server).