A VPN connection through a third-party VPN server disconnects after an hour on a Windows-based computer

Applies To
Windows Server 2012 R2 Datacenter Windows Server 2012 R2 Standard Windows Server 2012 R2 Essentials Windows Server 2012 R2 Foundation Windows 8.1 Enterprise Windows 8.1 Pro Windows 8.1 Windows RT 8.1 Windows Server 2012 Datacenter Windows Server 2012 Standard Windows Server 2012 Essentials Windows Server 2012 Foundation Windows 8 Enterprise Windows 8 Pro Windows 8 Windows RT

Symptoms

On a computer that is running Windows 8.1, Windows RT 8.1, Windows Server 2012 R2, Windows 8, Windows RT, or Windows Server 2012, you establish a Layer 2 Tunneling Protocol/Internet Protocol security (L2TP/IPsec) virtual private network (VPN) connection through a third-party VPN server. After about an hour, VPN disconnects automatically. In this case, you have to click Connect to reconnect to the VPN server.

Cause

During re-keying, the IPsec delays in establishing a new quick mode security association (QM SA) before the old QM SA expires. Because the client does not have an active QM SA for some time, VPN is disconnected.

Resolution

To resolve this issue in Windows 8.1, Windows RT 8.1, or Windows Server 2012 R2, install update rollup 2962409, or install the hotfix that is described in this article.

To resolve this issue in Windows 8 or Windows Server 2012, install the update or hotfix that is described in this article.

Update for Windows 8.1, Windows RT 8.1, or Windows Server 2012 R2

For more information about update rollup 2962409, click the following article number to view the article in the Microsoft Knowledge Base:

2962409 Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 update rollup: June 2014

Update for Windows 8 or Windows Server 2012

Method 1: Windows Update

This update is available from Windows Update.

Method 2: Microsoft Download Center

The following files are available for download from the Microsoft Download Center:

Operating system Update
All supported x86-based versions of Windows 8 Download Download the package now.
All supported x64-based versions of Windows 8 Download Download the package now.
All supported x64-based versions of Windows Server 2012 Download Download the package now.

Note The update for Windows RT can be obtained only from Windows Update.

 For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to obtain Microsoft support files from online services Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

Hotfix information

A supported hotfix is available from Microsoft Support. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing the problem described in this article. This hotfix might receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next software update that contains this hotfix.

If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, contact Microsoft Customer Service and Support to obtain the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, go to the following Microsoft website:

http:⁠//support.microsoft.com/contactus/?ws=support Note The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.

Prerequisites

To apply this hotfix, you must be running Windows 8.1, Windows Server 2012 R2, Windows 8, or Windows Server 2012.

Restart requirement

You do not have to restart the computer after you apply this hotfix.

Hotfix replacement information

This hotfix does not replace any previously released hotfix.

File information

The English (United States) version of this hotfix installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.

Windows RT 8.1, Windows 8.1, or Windows Server 2012 R2 file information notes

Important Windows 8.1 hotfixes and Windows Server 2012 R2 hotfixes are included in the same packages. However, only "Windows 8.1" is listed on the Hotfix Request page. To request the hotfix package that applies to one or both operating systems, select the hotfix that is listed under "Windows 8.1" on the page. Always refer to the "Applies To" section in articles to determine the actual operating system that each hotfix applies to.

  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:

    Version Product Milestone Service branch
    6.3.960 0.17 xxx Windows RT 8.1,Windows 8.1, and Windows Server 2012 R2 RTM GDR
  • The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separately in the "Additional file information" section. MUM, MANIFEST, and the associated security catalog (.cat) files, are very important to maintain the state of the updated components. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.

For Windows RT 8.1

File name File version File size Date Time Platform
Bfe.dll 6.3.9600.17111 523,776 30-Apr-2014 02:56 Not applicable
Fwpuclnt.dll 6.3.9600.17042 244,224 08-Mar-2014 05:37 Not applicable
Ikeext.dll 6.3.9600.17111 634,368 30-Apr-2014 02:46 Not applicable
Nshwfp.dll 6.3.9600.17042 559,616 08-Mar-2014 05:17 Not applicable
Bfe.dll 6.3.9600.17111 523,776 30-Apr-2014 02:56 Not applicable
Fwpuclnt.dll 6.3.9600.17042 244,224 08-Mar-2014 05:37 Not applicable
Ikeext.dll 6.3.9600.17111 634,368 30-Apr-2014 02:46 Not applicable
Networksecurity-ppdlic.xrm-ms Not applicable 3,059 30-Apr-2014 08:58 Not applicable
Nshwfp.dll 6.3.9600.17042 559,616 08-Mar-2014 05:17 Not applicable
Wfplwfs.sys 6.3.9600.17042 70,496 08-Mar-2014 08:30 Not applicable

      

For all supported x86-based versions of Windows 8.1

File name File version File size Date Time Platform
Bfe.dll 6.3.9600.17111 551,424 30-Apr-2014 03:38 x86
Fwpuclnt.dll 6.3.9600.17042 264,192 08-Mar-2014 06:25 x86
Ikeext.dll 6.3.9600.17111 731,648 30-Apr-2014 03:25 x86
Nshwfp.dll 6.3.9600.17042 567,296 08-Mar-2014 05:58 x86
Bfe.dll 6.3.9600.17111 551,424 30-Apr-2014 03:38 x86
Fwpuclnt.dll 6.3.9600.17042 264,192 08-Mar-2014 06:25 x86
Ikeext.dll 6.3.9600.17111 731,648 30-Apr-2014 03:25 x86
Networksecurity-ppdlic.xrm-ms Not applicable 3,059 30-Apr-2014 10:05 Not applicable
Nshwfp.dll 6.3.9600.17042 567,296 08-Mar-2014 05:58 x86
Wfplwfs.sys 6.3.9600.17042 69,464 08-Mar-2014 11:45 x86

      

For all supported x64-based versions of Windows 8.1 and of Windows Server 2012 R2

File name File version File size Date Time Platform
Bfe.dll 6.3.9600.17111 827,392 30-Apr-2014 04:14 x64
Fwpuclnt.dll 6.3.9600.17042 412,672 08-Mar-2014 06:41 x64
Ikeext.dll 6.3.9600.17111 1,063,424 30-Apr-2014 03:59 x64
Nshwfp.dll 6.3.9600.17042 717,312 08-Mar-2014 06:04 x64
Bfe.dll 6.3.9600.17111 827,392 30-Apr-2014 04:14 x64
Fwpuclnt.dll 6.3.9600.17042 412,672 08-Mar-2014 06:41 x64
Ikeext.dll 6.3.9600.17111 1,063,424 30-Apr-2014 03:59 x64
Networksecurity-ppdlic.xrm-ms Not applicable 3,059 30-Apr-2014 11:11 Not applicable
Nshwfp.dll 6.3.9600.17042 717,312 08-Mar-2014 06:04 x64
Wfplwfs.sys 6.3.9600.17042 136,024 08-Mar-2014 20:40 x64
Fwpuclnt.dll 6.3.9600.17042 264,192 08-Mar-2014 06:25 x86
Nshwfp.dll 6.3.9600.17042 567,296 08-Mar-2014 05:58 x86

        
      

Windows 8 and Windows Server 2012 file information and notes

Important Windows 8 and Windows Server 2012 hotfixes are included in the same packages. However, only "Windows 8" is listed on the Hotfix Request page. To request the hotfix package that applies to one or both operating systems, select the hotfix that is listed under "Windows 8" on the page. Always refer to the "Applies To" section in articles to determine the actual operating system that each hotfix applies to.

  • The files that apply to a specific product, milestone (RTM,SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table.

    Version Product Milestone Service branch
    6.2.920 0.20 xxx Windows 8 and Windows Server 2012 RTM DR
    6.2.920 0.21 xxx Windows 8 and Windows Server 2012 RTM LDR
  • The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separately in the "Additional file information" section. MUM and MANIFEST files, and the associated security catalog (.cat) files, are very important in maintaining the state of the updated components. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.

For all supported x86-based versions of Windows 8

File name File version File size Date Time Platform
Bfe.dll 6.2.9200.21012 473,600 12-Apr-2014 07:31 x86
Fwpuclnt.dll 6.2.9200.20569 245,248 27-Nov-2012 04:22 x86
Ikeext.dll 6.2.9200.21012 683,520 12-Apr-2014 07:31 x86
Nshwfp.dll 6.2.9200.21012 702,464 12-Apr-2014 07:32 x86
Bfe.dll 6.2.9200.21012 473,600 12-Apr-2014 07:31 x86
Fwpuclnt.dll 6.2.9200.20569 245,248 27-Nov-2012 04:22 x86
Ikeext.dll 6.2.9200.21012 683,520 12-Apr-2014 07:31 x86
Networksecurity-ppdlic.xrm-ms Not applicable 2,920 12-Apr-2014 07:49 Not applicable
Nshwfp.dll 6.2.9200.21012 702,464 12-Apr-2014 07:32 x86
Wfplwfs.sys 6.2.9200.21012 38,744 12-Apr-2014 07:54 x86

For all supported x64-based versions of Windows 8 and of Windows Server 2012

File name File version File size Date Time Platform
Bfe.dll 6.2.9200.21012 718,848 12-Apr-2014 07:49 x64
Fwpuclnt.dll 6.2.9200.20569 378,880 27-Nov-2012 04:25 x64
Ikeext.dll 6.2.9200.21012 1,074,688 12-Apr-2014 07:49 x64
Nshwfp.dll 6.2.9200.21012 888,832 12-Apr-2014 07:50 x64
Bfe.dll 6.2.9200.21012 718,848 12-Apr-2014 07:49 x64
Fwpuclnt.dll 6.2.9200.20569 378,880 27-Nov-2012 04:25 x64
Ikeext.dll 6.2.9200.21012 1,074,688 12-Apr-2014 07:49 x64
Networksecurity-ppdlic.xrm-ms Not applicable 2,920 12-Apr-2014 09:49 Not applicable
Nshwfp.dll 6.2.9200.21012 888,832 12-Apr-2014 07:50 x64
Wfplwfs.sys 6.2.9200.21012 96,600 12-Apr-2014 09:53 x64
Fwpuclnt.dll 6.2.9200.20569 245,248 27-Nov-2012 04:22 x86
Nshwfp.dll 6.2.9200.21012 702,464 12-Apr-2014 07:32 x86

      

Additional file information

Additional file information for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2

Additional files for Windows RT 8.1

File property Value
File name Arm_367931d5f591e9520de124cf2e7b61ac_31bf3856ad364e35_6.3.9600.17111_none_2c5a9c7cb7f97f1e.manifest
File version Not applicable
File size 710
Date (UTC) 30-Apr-2014
Time (UTC) 19:19
File name Arm_7cb8af39e5b77046769ec5a1f5952093_31bf3856ad364e35_6.3.9600.17111_none_81ba752ff7b0ef61.manifest
File version Not applicable
File size 704
Date (UTC) 30-Apr-2014
Time (UTC) 19:19
File name Arm_microsoft-windows-network-security-winpe_31bf3856ad364e35_6.3.9600.17111_none_7af3ec9532405be6.manifest
File version Not applicable
File size 98,336
Date (UTC) 30-Apr-2014
Time (UTC) 19:20
File name Arm_microsoft-windows-network-security_31bf3856ad364e35_6.3.9600.17111_none_620f3aca45eb9bc4.manifest
File version Not applicable
File size 96,499
Date (UTC) 30-Apr-2014
Time (UTC) 19:20

Additional files for all supported x86-based versions of Windows 8.1

File property Value
File name X86_7f6bef91b2a2bcf1eb09e82ed27da4a6_31bf3856ad364e35_6.3.9600.17111_none_2fb5bac9cd2c718e.manifest
File version Not applicable
File size 704
Date (UTC) 30-Apr-2014
Time (UTC) 19:16
File name X86_a555b77556f99dc25ea9374b098fd2f7_31bf3856ad364e35_6.3.9600.17111_none_d9ba0c3d233aa98f.manifest
File version Not applicable
File size 710
Date (UTC) 30-Apr-2014
Time (UTC) 19:16
File name X86_microsoft-windows-network-security-winpe_31bf3856ad364e35_6.3.9600.17111_none_7af17a3d32433d20.manifest
File version Not applicable
File size 98,336
Date (UTC) 30-Apr-2014
Time (UTC) 19:16
File name X86_microsoft-windows-network-security_31bf3856ad364e35_6.3.9600.17111_none_620cc87245ee7cfe.manifest
File version Not applicable
File size 96,439
Date (UTC) 30-Apr-2014
Time (UTC) 19:16

Additional files for all supported x64-based versions of Windows 8.1 and of Windows Server 2012 R2

File property Value
File name Amd64_1dfe72f92ba4fd73ce4e05327b0a02e1_31bf3856ad364e35_6.3.9600.17111_none_7f00b63a51e1132c.manifest
File version Not applicable
File size 708
Date (UTC) 30-Apr-2014
Time (UTC) 19:10
File name Amd64_7e8f604c4e2340e4c07b2ca77b96e770_31bf3856ad364e35_6.3.9600.17111_none_eecba496cbb8d306.manifest
File version Not applicable
File size 708
Date (UTC) 30-Apr-2014
Time (UTC) 19:10
File name Amd64_dab0ce52bc02e7d43e539c98bfc7f841_31bf3856ad364e35_6.3.9600.17111_none_6d37037dd81cba89.manifest
File version Not applicable
File size 714
Date (UTC) 30-Apr-2014
Time (UTC) 19:10
File name Amd64_microsoft-windows-network-security-winpe_31bf3856ad364e35_6.3.9600.17111_none_d71015c0eaa0ae56.manifest
File version Not applicable
File size 98,342
Date (UTC) 30-Apr-2014
Time (UTC) 19:10
File name Amd64_microsoft-windows-network-security_31bf3856ad364e35_6.3.9600.17111_none_be2b63f5fe4bee34.manifest
File version Not applicable
File size 96,445
Date (UTC) 30-Apr-2014
Time (UTC) 19:10
File name Wow64_microsoft-windows-network-security_31bf3856ad364e35_6.3.9600.17111_none_c8800e4832acb02f.manifest
File version Not applicable
File size 19,669
Date (UTC) 30-Apr-2014
Time (UTC) 19:10

      

Additional file information for Windows 8 and Windows Server 2012

Additional files for all supported x86-based versions of Windows 8

File name Package_1_for_kb2955808~31bf3856ad364e35~x86~~6.2.2.0.mum
File version Not applicable
File size 1,822
Date (UTC) 12-Apr-2014
Time (UTC) 16:05
Platform Not applicable
File name Package_2_for_kb2955808~31bf3856ad364e35~x86~~6.2.2.0.mum
File version Not applicable
File size 1,818
Date (UTC) 12-Apr-2014
Time (UTC) 16:05
Platform Not applicable
File name Package_3_for_kb2955808~31bf3856ad364e35~x86~~6.2.2.0.mum
File version Not applicable
File size 1,827
Date (UTC) 12-Apr-2014
Time (UTC) 16:05
Platform Not applicable
File name Package_for_kb2955808_rtm~31bf3856ad364e35~x86~~6.2.2.0.mum
File version Not applicable
File size 2,421
Date (UTC) 12-Apr-2014
Time (UTC) 16:05
Platform Not applicable
File name X86_5371a7cf02355e16eeb825279f0b0ef0_31bf3856ad364e35_6.2.9200.21012_none_12006afcdac3e352.manifest
File version Not applicable
File size 704
Date (UTC) 12-Apr-2014
Time (UTC) 16:05
Platform Not applicable
File name X86_c6194780f03b4a5f6545ec058148b418_31bf3856ad364e35_6.2.9200.21012_none_d20e3938243d11ca.manifest
File version Not applicable
File size 710
Date (UTC) 12-Apr-2014
Time (UTC) 16:05
Platform Not applicable
File name X86_microsoft-windows-network-security-winpe_31bf3856ad364e35_6.2.9200.21012_none_e3875ae0012d2b76.manifest
File version Not applicable
File size 98,336
Date (UTC) 12-Apr-2014
Time (UTC) 16:05
Platform Not applicable
File name X86_microsoft-windows-network-security_31bf3856ad364e35_6.2.9200.21012_none_caa2a91514d86b54.manifest
File version Not applicable
File size 93,475
Date (UTC) 12-Apr-2014
Time (UTC) 16:05
Platform Not applicable

Additional files for all supported x64-based versions of Windows 8 and of Windows Server 2012

File name Amd64_258800e272fb01df66c200be52354d86_31bf3856ad364e35_6.2.9200.21012_none_f122aabd1d66957d.manifest
File version Not applicable
File size 1,058
Date (UTC) 12-Apr-2014
Time (UTC) 16:15
Platform Not applicable
File name Amd64_428c4b299dc58a769573437738a48dbb_31bf3856ad364e35_6.2.9200.21012_none_7f654fed565d871e.manifest
File version Not applicable
File size 714
Date (UTC) 12-Apr-2014
Time (UTC) 16:15
Platform Not applicable
File name Amd64_microsoft-windows-network-security-winpe_31bf3856ad364e35_6.2.9200.21012_none_3fa5f663b98a9cac.manifest
File version Not applicable
File size 98,342
Date (UTC) 12-Apr-2014
Time (UTC) 16:15
Platform Not applicable
File name Amd64_microsoft-windows-network-security_31bf3856ad364e35_6.2.9200.21012_none_26c14498cd35dc8a.manifest
File version Not applicable
File size 93,718
Date (UTC) 12-Apr-2014
Time (UTC) 16:15
Platform Not applicable
File name Package_1_for_kb2955808~31bf3856ad364e35~amd64~~6.2.2.0.mum
File version Not applicable
File size 1,832
Date (UTC) 12-Apr-2014
Time (UTC) 16:15
Platform Not applicable
File name Package_2_for_kb2955808~31bf3856ad364e35~amd64~~6.2.2.0.mum
File version Not applicable
File size 2,502
Date (UTC) 12-Apr-2014
Time (UTC) 16:15
Platform Not applicable
File name Package_3_for_kb2955808~31bf3856ad364e35~amd64~~6.2.2.0.mum
File version Not applicable
File size 2,061
Date (UTC) 12-Apr-2014
Time (UTC) 16:15
Platform Not applicable
File name Package_for_kb2955808_rtm~31bf3856ad364e35~amd64~~6.2.2.0.mum
File version Not applicable
File size 2,887
Date (UTC) 12-Apr-2014
Time (UTC) 16:15
Platform Not applicable
File name Wow64_microsoft-windows-network-security_31bf3856ad364e35_6.2.9200.21012_none_3115eeeb01969e85.manifest
File version Not applicable
File size 16,196
Date (UTC) 12-Apr-2014
Time (UTC) 16:15
Platform Not applicable

      

Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

References

Learn about the terminology that Microsoft uses to describe software updates.