Event ID: 547 Source: Security

Event ID/Source search

Keyword search

Example: Windows cannot unload your registry file

EvLog 3.0 – Monitor an unlimited number of servers with $49/year

With the current low prices for servers and the need for processing power, even a small company may end up with quite a few of them. If ten years ago it was still common to see an entire company using just one server, these days that's no longer the case.
New computers are added to the network with the understanding that they will be taken care of by the admins. Keeping an eye on these servers is a tedious, time-consuming process. Even with 5 minutes per server (to check the logs and other parameters), it may take an hour to make sure that everything is ok and no "red lights" are blinking on any of the servers.

Event ID: 547 Source: Security

Source: Security

Type: Failure Audit

Description:
IKE security association negotiation failed.
Mode: Key Exchange Mode (Main Mode)
Filter:
<Source IP Address>
<Source IP Address Mask>
<Destination IP Address>
<Destination IP Address Mask>
<Protocol>
<Source Port>
<Destination Port>
Failure Point: Me
Failure Reason: IKE SA deleted before establishment completed

English: Request a translation of the event description in plain English.

Comments:
Maxim Kкishtafovitz
In my case, i got this event after one of the two reverse lookup zones in the DNS server failed to load. The problem was fixed by loading the missed zone.
Click if the comment is good!

^{x
28}

EventID.Net
As per Microsoft: "This audit is the primary diagnostic tool for determining IKE negotiation failures. It describes which mode (Main or Quick), which filter, where the failure occurred (Me or Peer), and gives an explanation of the failure as well as likely reasons for this failure". See MSW2KDB for information about this event.
Click if the comment is good!

^{x
22}

EventID.Net
See ME833976 for a hotfix applicable to Microsoft Windows XP.
Click if the comment is good!

^{x
31}

EventID.Net
See ME257225 - Basic IPSec Troubleshooting in Windows 2000.
Click if the comment is good!

^{x
31}

Private comment: Subscribers only. See example of private comment

Links: ME257225, ME833976, Online Analysis of Security Event Log, MSW2KDB

Search: Google - Bing - Microsoft - Yahoo - EventID.Net Queue (1) - More links...

Feedback: Send comments or solutions - Notify me when updated

Printer friendly