I am seeing lot of IPSEC Authentication messages in eventlogs of Windows domain hosts. I was wondering if this - setting up IPSEC connections between domain workstations is a part of normal Windows behaviour?

  • 2
    It would be helpful to know the versions of Windows and the basic AD configuration.
    – schroeder
    Jun 19, 2014 at 17:04

2 Answers 2


Short answer is: probably normal.

Windows server 2008 can use IPSec (if configured) for domain and server isolation.

It depends on the configurations and the Group Policies involved. Aside from this answer, you'll need to head over to a Windows admin forum or Superuser for specifics.


yes, the IPSEC protocol is simply said an security protocol over the controller towards the workstations, its part of the regular traffic, so nothing to be worried about

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .