Windows Security Log Event ID 4652

Operating Systems Windows 2008 R2 and 7
Windows 2012 R2 and 8.1
Windows 2016 and 10
Windows Server 2019 and 2022
Category
 • Subcategory
Logon/Logoff
 • IPsec Main Mode
Type Failure
Corresponding events
in Windows 2003
and before
 

4652: An IPsec Main Mode negotiation failed

On this page

Free Security Log Resources by Randy

Supercharger Enterprise


Load Balancing for Windows Event Collection

 

Examples of 4652

An IPsec Main Mode negotiation failed.

Local Endpoint:

   Principal Name:  %1
   Network Address: %9
   Keying Module Port: %10

Local Certificate:
   SHA Thumbprint: %2
   Issuing CA:  %3
   Root CA:  %4

Remote Endpoint:
   Principal Name:  %5
   Network Address: %11
   Keying Module Port: %12

Remote Certificate:
   SHA thumbprint:  %6
   Issuing CA:  %7
   Root CA:  %8

Additional Information:
   Keying Module Name: %13
   Authentication Method: %16
   Role:   %18
   Impersonation State: %19
   Main Mode Filter ID: %20

Failure Information:
   Failure Point:  %14
   Failure Reason:  %15
   State:   %17
   Initiator Cookie:  %21
   Responder Cookie: %22

Top 10 Windows Security Events to Monitor

Free Tool for Windows Event Collection

 

Upcoming Webinars
    Additional Resources

      Go To Event ID:

      Security Log
      Quick Reference
      Chart
      Download now!