| Event Id | 2015 |
| Source | Microsoft-Windows-Windows Firewall with Advanced Security |
| Description | A connection security rule was added to IPsec settings when Windows Firewall started. %tRule ID:%t%1 %tRuleName:%t%2 %tOrigin:%t%3 %tActive:%t%4 %tProtocol:%t%5 %tEndPoint1Ports:%t%6 %tEndPoint2Ports:%t%7 %tLocalTunnelEndpointV4:%t%8 %tLocalTunnelEndpointV6:%t%9 %tRemoteTunnelEndpointV4:%t%10 %tRemoteTunnelEndpointV6:%t%11 %tPhase1AuthSetId:%t%12 %tPhase2AuthSetId:%t%13 %tPhase2CryptoSetId:%t%14 %tAction:%t%15 %tProfiles:%t%16 %tLocalAddresses:%t%17 %tRemoteAddresses:%t%18 %tEmbeddedContext:%t%20 %tIsDTM:%t%22 %tApplyAuthZ:%t%23 %tBypassTunnelIfEncrypted:%t%24 %tNoIPSecOnOutbound:%t%25 %tModifyingUser:%t%26 %tModifyingApplication:%t%27 |
| Event Information | According to Microsoft : Cause : This event is logged when an connection security rule was added to IPsec settings when Windows Firewall started. Resolution : This is a normal condition. No further action is required. |
| Reference Links | Event ID 2015 from Microsoft-Windows-Windows Firewall with Advanced Security |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.