I am seeing lot of IPSEC Authentication messages in eventlogs of Windows domain hosts. I was wondering if this - setting up IPSEC connections between domain workstations is a part of normal Windows behaviour?

  • 2
    It would be helpful to know the versions of Windows and the basic AD configuration. – schroeder Jun 19 '14 at 17:04

Short answer is: probably normal.

Windows server 2008 can use IPSec (if configured) for domain and server isolation.

It depends on the configurations and the Group Policies involved. Aside from this answer, you'll need to head over to a Windows admin forum or Superuser for specifics.


yes, the IPSEC protocol is simply said an security protocol over the controller towards the workstations, its part of the regular traffic, so nothing to be worried about

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.