Stack Exchange network consists of 183 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.
Q&A for work
Connect and share knowledge within a single location that is structured and easy to search.
I am seeing lot of IPSEC Authentication messages in eventlogs of Windows domain hosts. I was wondering if this - setting up IPSEC connections between domain workstations is a part of normal Windows behaviour?
Short answer is: probably normal.
Windows server 2008 can use IPSec (if configured) for domain and server isolation.
It depends on the configurations and the Group Policies involved. Aside from this answer, you'll need to head over to a Windows admin forum or Superuser for specifics.
yes, the IPSEC protocol is simply said an security protocol over the controller towards the workstations, its part of the regular traffic, so nothing to be worried about