Event ID:
5452
Category:
Logon/Logoff
Subcategory:
IPsec Quick Mode
Supported on:
Windows Vista, Windows Server 2008
An IPsec Quick Mode security association ended.
Local Endpoint:
Network Address: %1
Port: %2
Tunnel Endpoint: %3
Remote Endpoint:
Network Address: %4
Port: %5
Tunnel Endpoint: %6
Additional Information:
Protocol: %7
Quick Mode SA ID: %8
Virtual Interface Tunnel ID: %9
Traffic Selector ID: %10
Note: Virtual Interface Tunnel ID and Traffic Selector ID data is available only on computers running Windows Server 2008 R2 or Windows 7.