General discussion


Failure Audit:"IPSec Services failed to get the complete list of network interfaces on the machine."

By Seagull Data Services ·
I'm just beginning to work on Windows XP seriously. While playing with the Microsoft Management Console, I came across the following in the Security Log in Event Viewer:

Event Type: Failure Audit
Event Source: Security
Event Category: Policy Change
Event I 615
Date: 05/08/2003
Time: 14:23:05
IPSec Services: IPSec Services failed to get the complete list of network interfaces on the machine. This can be a potential security hazard to the machine since some of the network interfaces may not get the protection as desired by the applied IPSec filters. Please run IPSec monitor snap-in to further diagnose the problem.

A search on google returns the question being asked but I haven't been able to find a resolution.

Any suggestions on what the cause might be and is it a problem?

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Comments

Collapse -

One more thing, this event crops up fairly frequently. Sometimes followed or proceeded by a success entry for IPSec.

Collapse -

Another thought. The PC is a laptop and I have power management enabled to shut down the NIC when it's not in use. Could this be the cause?

Collapse -

by Joseph Moore In reply to Failure Audit:"IPSec Serv ...

Well, there really isn't an answer posted for this out there.

Ok, well here are my suggestions.
1) Is the "IPSec Service" running and set to Automatic? Make sure it is on.

2) Can you open the IP Security Monitor snap-in? Hopefully you can, if IPSec is working properly.

3) When do these error happen in relation to the power shutdown of the NIC?

Just my thoughts...

Collapse -

by Seagull Data Services In reply to

Thanks for the thoughts Joseph

Collapse -

Thanks Joseph
1) Ipsec is up and running. The services snap in shows it as starting automatically and here are success audits in there too.
2) The snap in is loadable. I don't know enough yet to tell if there are any policies defined.
3) I'm not quite sure about the exact timings but there do seem to be failure audits for powering off the laptop and dialling in to the internet.

From searching for an answer, this seems to be a common problem. I've tried searching the ms support site but with no luck. I'm not even sure it's a problem.

Thanks for the reply

Collapse -

I've been checking the log files.
The event seems to occur when I log off from my isp.
The powersaving (turn off) option unavailable for the modem.
I've been wondering about the wording of the error message. does "get" mean get the list or detect the device? If the system doesn't know the interface is on the list then how does it know something's missing. Perhaps the modem "shutdown" process causes the failure.

Another thought: it's a "soft" modem. That could be the reason it can't be shut off to save power.

Collapse -

This question was closed by the author

Related Discussions

Related Forums