| Event Id | 5485 |
| Source | Microsoft-Windows-Security-Auditing |
| Description | IPsec Services failed to process some IPsec filters on a plug-and-play event for network interfaces. This poses a potential security risk because some of the network interfaces may not get the protection provided by the applied IPsec filters. Use the IP Security Monitor snap-in to diagnose the problem. |
| Event Information | According to Microsoft : Cause : This event is logged when IPsec Services failed to process some IPsec filters on a plug-and-play event for network interfaces. Resolution : Review IP Security Monitor and restart computer In specific situations when memory resources are extremely low, the IPsec Policy Agent service cannot function correctly. Because of the low memory situation, IPsec was not able to retrieve the entire list of network adapters connected to your computer. The network adapaters at the end of the list might not be protected. You can use the IP Security Monitor to see which network adapters are not protected, but you cannot resolve the problem by using that program. To recover from this situation without compromising security, you must restart the computer. You cannot just free up memory by closing programs, and you cannot just restart the service. After the computer restarts, consider running fewer applications on the computer to place less of a load on memory resources. |
| Reference Links | a href="http://technet.microsoft.com/en-us/library/cc733410.aspx"targett="_blank">Event ID 5485 from Source Security |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.