| Event Id | 541 |
| Source | Security |
| Description | IKE security association established. Mode: %1 Peer Identity: %2 Filter: %3 Parameters: %4 |
| Event Information | According to Microsoft : Cause : If IP Security returns (Mode == Key Exchange (Main mode)), this means that the peer has successfully authenticated, and the Key Exchange security association is established. If the value returned is (Mode == Data Protect (Quick mode)), this means that a Data Protection security association over the given filter has been established. Resolution : The main purpose of the success security audits is to track an attacker after the fact. |
| Reference Links | Event ID 541 from Source Security How to Configure IPSec Tunneling in Windows 2000 |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.