Event Message:
IKE security association established. Mode: name Peer Identity: name Filter: name Parameters: parameter
Source |
Event Log |
Event ID |
Event Type |
|---|---|---|---|
Security |
Security |
541 |
Success Audit |
Explanation:
If IP Security returns (Mode == Key Exchange (Main mode)), this means that the peer has successfully authenticated, and the Key Exchange security association is established. If the value returned is (Mode == Data Protect (Quick mode)), this means that a Data Protection security association over the given filter has been established.
User Action:
The main purpose of the success security audits is to track an attacker after the fact.