Server 2003 IPSec Event ID 4292 ocasionally after reboot - Blocking TCP/IP traffic

Posted on 2008-11-19
Last Modified: 2012-05-07
We reboot our servers weekly, every 7 weeks or so, one of the servers is unreachable and needs to be rebooted.  
Windows Server 2003 R2 Standard edition
I have attached a txt file with the systeminfo output.
This server is not used to create VPN tunnels.

Is there any reason for Server 2003 to run IPSec Service?
Let me know if you need more information, I didn't want to make this too unreadable.
In the Event Log I recieve the following Event:
Event Type:      Error
Event Source:      IPSec
Event Category:      None
Event ID:      4292
Date:            11/16/2008
Time:            12:04:52 PM
User:            N/A
Computer:      SERVER
The IPSec driver has entered Block mode. IPSec will discard all inbound and outbound TCP/IP network traffic that is not permitted by boot-time IPSec Policy exemptions. User Action: To restore full unsecured TCP/IP connectivity, disable the IPSec services, and then restart the computer.  For detailed troubleshooting information, review the events in the Security event log.

For more information, see Help and Support Center at
0000: 00 00 00 00 01 00 54 00   ......T.
0008: 00 00 00 00 c4 10 00 c0   ....Ä..À
0010: 01 00 00 00 00 00 00 00   ........
0018: 00 00 00 00 00 00 00 00   ........
0020: 00 00 00 00 00 00 00 00   ........

Question by:runsysrun
    1 Comment
    LVL 51

    Accepted Solution

    If you're not using IPSec policies on your network or via Remote Access, then it's safe to Disable this service.

    One of these may be part of the issue:;en-us;956189;en-us;930220


    Featured Post

    Looking for New Ways to Advertise?

    Engage with tech pros in our community with native advertising, as a Vendor Expert, and more.

    Join & Write a Comment

    Microsoft has released remote PowerShell capabilities to all commercial Office 365 customers. So you can be controlled via PowerShell and not from the Office 365 admin center Download Windows PowerShell Module for Lync Online http://www.micros…
    ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
    This video discusses moving either the default database or any database to a new volume.
    Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…

    733 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    19 Experts available now in Live!

    Get 1:1 Help Now