Symptoms

Consider the following scenario:

  • You have a computer that is running Windows 7 or Windows Server 2008 R2.

  • You set up an Internet Protocol Security (IPsec) connection in the Internet Key Exchange version 1 (IKEv1) tunnel mode between the computer and another device.

  • There are two Network Address Translation (NAT) devices between the computer and the device.

In this scenario, no data packets are routed through the IPsec tunnel. The IPsec tunnel mode connection is negotiated repeatedly.

Resolution

Important This hotfix only enables you to establish an IPsec tunnel mode connection in case Windows 7 or Windows Server 2008 R2 works as the initiator of the IPsec tunnel. This hotfix cannot resolve the connection issue in which Windows 7 or Windows Server 2008 R2 works as a responder to accept an incoming tunnel mode connection.

Hotfix information

A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing the problem described in this article. This hotfix might receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next software update that contains this hotfix.

If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, contact Microsoft Customer Service and Support to obtain the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft website:

http://support.microsoft.com/contactus/?ws=supportNote The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.

Prerequisites

There are no prerequisites.

Registry information

To use the hotfix in this package, you do not have to make any changes to the registry.

Restart requirement

You may have to restart the computer after you apply this hotfix.

Hotfix replacement information

This hotfix does not replace a previously released hotfix.

File information

The global version of this hotfix installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.

Windows 7 and Windows Server 2008 R2 file information notes


Important Windows 7 hotfixes and Windows Server 2008 R2 hotfixes are included in the same packages. However, hotfixes on the Hotfix Request page are listed under both operating systems. To request the hotfix package that applies to one or both operating systems, select the hotfix that is listed under "Windows 7/Windows Server 2008 R2" on the page. Always refer to the "Applies To" section in articles to determine the actual operating system that each hotfix applies to.

  • The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separately in the "Additional file information for Windows Server 2008 R2 and for Windows 7" section. MUM and MANIFEST files, and the associated security catalog (.cat) files, are extremely important to maintain the state of the updated components. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.

For all supported x86-based versions of Windows 7

File name

File version

File size

Date

Time

Platform

Fwremotesvr.dll

6.1.7600.16385

44,032

14-Jul-2009

01:15

x86

Ipsecsvc.dll

6.1.7600.20799

350,720

14-Sep-2010

04:34

x86

Ipsecsvc.mof

Not applicable

1,278

10-Jun-2009

21:28

Not applicable

Polstore.dll

6.1.7600.16385

273,920

14-Jul-2009

01:16

x86

Polstore.mof

Not applicable

1,275

10-Jun-2009

21:28

Not applicable

Winipsec.dll

6.1.7600.16385

70,144

14-Jul-2009

01:16

x86

Winipsec.mof

Not applicable

1,270

10-Jun-2009

21:28

Not applicable

Bfe.dll

6.1.7600.16385

493,568

14-Jul-2009

01:14

x86

Fwpuclnt.dll

6.1.7600.16385

216,576

14-Jul-2009

01:15

x86

Ikeext.dll

6.1.7600.20799

669,184

14-Sep-2010

04:34

x86

Networksecurity-ppdlic.xrm-ms

Not applicable

3,028

14-Sep-2010

04:46

Not applicable

Nshwfp.dll

6.1.7600.16385

656,384

14-Jul-2009

01:16

x86

Wfp.mof

Not applicable

822

10-Jun-2009

21:32

Not applicable

Firewallapi.dll

6.1.7600.16385

462,848

14-Jul-2009

01:15

x86

Firewallapi.mof

Not applicable

1,913

10-Jun-2009

21:29

Not applicable

Icfupgd.dll

6.1.7600.16385

89,088

14-Jul-2009

01:15

x86

Mpsdrv.mof

Not applicable

1,088

10-Jun-2009

21:28

Not applicable

Mpsdrv.sys

6.1.7600.16385

60,416

13-Jul-2009

23:52

x86

Mpssvc.dll

6.1.7600.20799

566,272

14-Sep-2010

04:35

x86

Mpssvc.mof

Not applicable

1,900

10-Jun-2009

21:29

Not applicable

Wfapigp.dll

6.1.7600.16385

18,944

14-Jul-2009

01:16

x86

Wfapigp.mof

Not applicable

1,083

10-Jun-2009

21:29

Not applicable

For all supported x64-based versions of Windows 7 and of Windows Server 2008 R2

File name

File version

File size

Date

Time

Platform

Fwremotesvr.dll

6.1.7600.16385

75,776

14-Jul-2009

01:40

x64

Ipsecsvc.dll

6.1.7600.20799

500,224

14-Sep-2010

05:22

x64

Ipsecsvc.mof

Not applicable

1,278

10-Jun-2009

20:47

Not applicable

Polstore.dll

6.1.7600.16385

372,224

14-Jul-2009

01:41

x64

Polstore.mof

Not applicable

1,275

10-Jun-2009

20:47

Not applicable

Winipsec.dll

6.1.7600.16385

105,472

14-Jul-2009

01:41

x64

Winipsec.mof

Not applicable

1,270

10-Jun-2009

20:47

Not applicable

Bfe.dll

6.1.7600.16385

703,488

14-Jul-2009

01:40

x64

Fwpuclnt.dll

6.1.7600.16385

324,096

14-Jul-2009

01:40

x64

Ikeext.dll

6.1.7600.20799

848,384

14-Sep-2010

05:22

x64

Networksecurity-ppdlic.xrm-ms

Not applicable

3,028

14-Sep-2010

05:37

Not applicable

Nshwfp.dll

6.1.7600.16385

830,464

14-Jul-2009

01:41

x64

Wfp.mof

Not applicable

822

10-Jun-2009

20:51

Not applicable

Firewallapi.dll

6.1.7600.16385

748,032

14-Jul-2009

01:40

x64

Firewallapi.mof

Not applicable

1,913

10-Jun-2009

20:47

Not applicable

Icfupgd.dll

6.1.7600.16385

108,544

14-Jul-2009

01:41

x64

Mpsdrv.mof

Not applicable

1,088

10-Jun-2009

20:46

Not applicable

Mpsdrv.sys

6.1.7600.16385

77,312

14-Jul-2009

00:08

x64

Mpssvc.dll

6.1.7600.20799

826,368

14-Sep-2010

05:23

x64

Mpssvc.mof

Not applicable

1,900

10-Jun-2009

20:47

Not applicable

Wfapigp.dll

6.1.7600.16385

22,528

14-Jul-2009

01:41

x64

Wfapigp.mof

Not applicable

1,083

10-Jun-2009

20:47

Not applicable

For all supported IA-64-based versions of Windows Server 2008 R2

File name

File version

File size

Date

Time

Platform

Fwremotesvr.dll

6.1.7600.20799

131,584

14-Sep-2010

04:12

IA-64

Ipsecsvc.dll

6.1.7600.20799

1,217,536

14-Sep-2010

04:13

IA-64

Ipsecsvc.mof

Not applicable

1,278

10-Jun-2009

20:51

Not applicable

Polstore.dll

6.1.7600.16385

797,696

14-Jul-2009

01:48

IA-64

Polstore.mof

Not applicable

1,275

10-Jun-2009

20:51

Not applicable

Winipsec.dll

6.1.7600.16385

183,296

14-Jul-2009

01:50

IA-64

Winipsec.mof

Not applicable

1,270

10-Jun-2009

20:51

Not applicable

Bfe.dll

6.1.7600.16385

1,071,616

14-Jul-2009

01:45

IA-64

Fwpuclnt.dll

6.1.7600.20799

566,272

14-Sep-2010

04:12

IA-64

Ikeext.dll

6.1.7600.20799

1,473,536

14-Sep-2010

04:13

IA-64

Networksecurity-ppdlic.xrm-ms

Not applicable

3,028

14-Sep-2010

04:27

Not applicable

Nshwfp.dll

6.1.7600.16385

1,112,064

14-Jul-2009

01:48

IA-64

Wfp.mof

Not applicable

822

10-Jun-2009

20:57

Not applicable

Firewallapi.dll

6.1.7600.16385

1,304,576

14-Jul-2009

01:46

IA-64

Firewallapi.mof

Not applicable

1,913

10-Jun-2009

20:52

Not applicable

Icfupgd.dll

6.1.7600.16385

246,272

14-Jul-2009

01:46

IA-64

Mpsdrv.mof

Not applicable

1,088

10-Jun-2009

20:51

Not applicable

Mpsdrv.sys

6.1.7600.16385

179,200

14-Jul-2009

00:24

IA-64

Mpssvc.dll

6.1.7600.20799

1,421,824

14-Sep-2010

04:14

IA-64

Mpssvc.mof

Not applicable

1,900

10-Jun-2009

20:52

Not applicable

Wfapigp.dll

6.1.7600.16385

52,736

14-Jul-2009

01:50

IA-64

Wfapigp.mof

Not applicable

1,083

10-Jun-2009

20:52

Not applicable


Workaround

To work around this issue, remove the second NAT device.

Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

More Information

For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:

824684 Description of the standard terminology that is used to describe Microsoft software updates

Additional file information

Additional file information for Windows 7 and for Windows Server 2008 R2

Additional files for all supported x86-based versions of Windows 7

File name

Update.mum

File version

Not applicable

File size

1,881

Date (UTC)

14-Sep-2010

Time (UTC)

19:11

Platform

Not applicable


File name

X86_16a9227345b98ad33cc3601725f1d573_31bf3856ad364e35_6.1.7600.20799_none_a00ca06023dfd45e.manifest

File version

Not applicable

File size

704

Date (UTC)

14-Sep-2010

Time (UTC)

19:11

Platform

Not applicable


File name

X86_2c11b5be3117ff0cf655a01a48b00b1f_31bf3856ad364e35_6.1.7600.20799_none_153ec7b7360a0a38.manifest

File version

Not applicable

File size

691

Date (UTC)

14-Sep-2010

Time (UTC)

19:11

Platform

Not applicable


File name

X86_d970309c29007453ea4f3dcd84c61776_31bf3856ad364e35_6.1.7600.20799_none_18f87c5c47697087.manifest

File version

Not applicable

File size

723

Date (UTC)

14-Sep-2010

Time (UTC)

19:11

Platform

Not applicable


File name

X86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.1.7600.20799_none_4467a1ae667aec69.manifest

File version

Not applicable

File size

28,562

Date (UTC)

14-Sep-2010

Time (UTC)

19:15

Platform

Not applicable


File name

X86_microsoft-windows-network-security_31bf3856ad364e35_6.1.7600.20799_none_cd7d99c5a5008606.manifest

File version

Not applicable

File size

158,590

Date (UTC)

14-Sep-2010

Time (UTC)

19:15

Platform

Not applicable


File name

X86_networking-mpssvc-svc_31bf3856ad364e35_6.1.7600.20799_none_9a6d655542526b96.manifest

File version

Not applicable

File size

236,940

Date (UTC)

14-Sep-2010

Time (UTC)

19:15

Platform

Not applicable

Additional files for all supported x64-based versions of Windows 7 and of Windows Server 2008 R2

File name

Amd64_0f7c39fff5ec8c3b31f282fa0b0deb4d_31bf3856ad364e35_6.1.7600.20799_none_1ab06b68c4d4e7a1.manifest

File version

Not applicable

File size

708

Date (UTC)

14-Sep-2010

Time (UTC)

19:11

Platform

Not applicable


File name

Amd64_35ff054ca18f4cbaf198ea035fbec939_31bf3856ad364e35_6.1.7600.20799_none_03306b17efcfd025.manifest

File version

Not applicable

File size

1,058

Date (UTC)

14-Sep-2010

Time (UTC)

19:11

Platform

Not applicable


File name

Amd64_73f6b3d24740777ca5470971454b2106_31bf3856ad364e35_6.1.7600.20799_none_1621001e12a7b2a8.manifest

File version

Not applicable

File size

1,096

Date (UTC)

14-Sep-2010

Time (UTC)

19:11

Platform

Not applicable


File name

Amd64_7ae49adbe8d46a428de45dca286d0030_31bf3856ad364e35_6.1.7600.20799_none_e29660bc118d454c.manifest

File version

Not applicable

File size

727

Date (UTC)

14-Sep-2010

Time (UTC)

19:11

Platform

Not applicable


File name

Amd64_9874c9577862df8464d5b7015b7c5152_31bf3856ad364e35_6.1.7600.20799_none_c24708406cca1faa.manifest

File version

Not applicable

File size

727

Date (UTC)

14-Sep-2010

Time (UTC)

19:11

Platform

Not applicable


File name

Amd64_eb6ac2bf39c34a20344e34936447323d_31bf3856ad364e35_6.1.7600.20799_none_f5db4bc46a1db3ee.manifest

File version

Not applicable

File size

1,032

Date (UTC)

14-Sep-2010

Time (UTC)

19:11

Platform

Not applicable


File name

Amd64_f17fd8e28ead035e8b9be3ec216e6de8_31bf3856ad364e35_6.1.7600.20799_none_0de0b018f4e9d4e4.manifest

File version

Not applicable

File size

695

Date (UTC)

14-Sep-2010

Time (UTC)

19:11

Platform

Not applicable


File name

Amd64_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.1.7600.20799_none_a0863d321ed85d9f.manifest

File version

Not applicable

File size

28,568

Date (UTC)

14-Sep-2010

Time (UTC)

19:20

Platform

Not applicable


File name

Amd64_microsoft-windows-network-security_31bf3856ad364e35_6.1.7600.20799_none_299c35495d5df73c.manifest

File version

Not applicable

File size

158,596

Date (UTC)

14-Sep-2010

Time (UTC)

19:20

Platform

Not applicable


File name

Amd64_networking-mpssvc-svc_31bf3856ad364e35_6.1.7600.20799_none_f68c00d8faafdccc.manifest

File version

Not applicable

File size

236,946

Date (UTC)

14-Sep-2010

Time (UTC)

19:20

Platform

Not applicable


File name

Update.mum

File version

Not applicable

File size

2,537

Date (UTC)

14-Sep-2010

Time (UTC)

19:11

Platform

Not applicable


File name

Wow64_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.1.7600.20799_none_aadae78453391f9a.manifest

File version

Not applicable

File size

14,862

Date (UTC)

14-Sep-2010

Time (UTC)

04:57

Platform

Not applicable


File name

Wow64_microsoft-windows-network-security_31bf3856ad364e35_6.1.7600.20799_none_33f0df9b91beb937.manifest

File version

Not applicable

File size

94,348

Date (UTC)

14-Sep-2010

Time (UTC)

04:57

Platform

Not applicable


File name

Wow64_networking-mpssvc-svc_31bf3856ad364e35_6.1.7600.20799_none_00e0ab2b2f109ec7.manifest

File version

Not applicable

File size

76,903

Date (UTC)

14-Sep-2010

Time (UTC)

04:56

Platform

Not applicable

Additional files for all supported IA-64-based versions of Windows Server 2008 R2

File name

Ia64_5a6b044bc2206a052331f42e70582531_31bf3856ad364e35_6.1.7600.20799_none_771acb0ec5c56a38.manifest

File version

Not applicable

File size

725

Date (UTC)

14-Sep-2010

Time (UTC)

19:11

Platform

Not applicable


File name

Ia64_9874c9577862df8464d5b7015b7c5152_31bf3856ad364e35_6.1.7600.20799_none_662a10b2b46ab770.manifest

File version

Not applicable

File size

726

Date (UTC)

14-Sep-2010

Time (UTC)

19:11

Platform

Not applicable


File name

Ia64_9bce947442a5291da6703a9062db90cd_31bf3856ad364e35_6.1.7600.20799_none_d986b0feecd94fae.manifest

File version

Not applicable

File size

1,030

Date (UTC)

14-Sep-2010

Time (UTC)

19:11

Platform

Not applicable


File name

Ia64_da9acb0301146da9adafd4b2a2cca33d_31bf3856ad364e35_6.1.7600.20799_none_ae432b37c546d78d.manifest

File version

Not applicable

File size

1,056

Date (UTC)

14-Sep-2010

Time (UTC)

19:11

Platform

Not applicable


File name

Ia64_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.1.7600.20799_none_446945a46678f565.manifest

File version

Not applicable

File size

28,565

Date (UTC)

14-Sep-2010

Time (UTC)

19:12

Platform

Not applicable


File name

Ia64_microsoft-windows-network-security_31bf3856ad364e35_6.1.7600.20799_none_cd7f3dbba4fe8f02.manifest

File version

Not applicable

File size

158,593

Date (UTC)

14-Sep-2010

Time (UTC)

19:12

Platform

Not applicable


File name

Ia64_networking-mpssvc-svc_31bf3856ad364e35_6.1.7600.20799_none_9a6f094b42507492.manifest

File version

Not applicable

File size

236,943

Date (UTC)

14-Sep-2010

Time (UTC)

19:12

Platform

Not applicable


File name

Update.mum

File version

Not applicable

File size

1,690

Date (UTC)

14-Sep-2010

Time (UTC)

19:11

Platform

Not applicable


File name

Wow64_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.1.7600.20799_none_aadae78453391f9a.manifest

File version

Not applicable

File size

14,862

Date (UTC)

14-Sep-2010

Time (UTC)

04:57

Platform

Not applicable


File name

Wow64_microsoft-windows-network-security_31bf3856ad364e35_6.1.7600.20799_none_33f0df9b91beb937.manifest

File version

Not applicable

File size

94,348

Date (UTC)

14-Sep-2010

Time (UTC)

04:57

Platform

Not applicable


File name

Wow64_networking-mpssvc-svc_31bf3856ad364e35_6.1.7600.20799_none_00e0ab2b2f109ec7.manifest

File version

Not applicable

File size

76,903

Date (UTC)

14-Sep-2010

Time (UTC)

04:56

Platform

Not applicable

Need more help?

Expand your skills
Explore Training
Get new features first
Join Microsoft Insiders

Was this information helpful?

What affected your experience?

Thank you for your feedback!

×