Перейти к основному контенту
Поддержка
Войдите с помощью учетной записи Майкрософт
Войдите или создайте учетную запись.
Здравствуйте,
Выберите другую учетную запись.
У вас несколько учетных записей
Выберите учетную запись, с помощью которой нужно войти.
Английский
К сожалению, эта статья недоступна на вашем языке.

Symptoms

Consider the following scenario:

  • You configure a Microsoft Forefront Threat Management Gateway (TMG) 2010 server as an IPsec site-to-site tunnel endpoint.

  • You establish the IPsec tunnel, and then clients access resources on both sides of the VPN tunnel.

  • You try to access the internal IP address of the Forefront TMG 2010 server by using a client on the remote network of the endpoint.

In this scenario, traffic to the internal IP address of the Forefront TMG server is dropped by IPsec. Additionally, the IPsec driver logs the following error for dropped packets:

0xc0360007 (STATUS_IPSEC_CLEAR_TEXT_DROP)

Cause

This issue occurs because the IPsec security context for the locally destined packet is removed before it is evaluated by the incoming transport layer.

Resolution

To resolve this issue, follow these steps:

  1. Install the software update that is described in the following Microsoft Knowledge Base (KB) article:

    2498770 Software Update 1 Rollup 3 for Forefront Threat Management Gateway (TMG) 2010 Service Pack 1

  2. Make sure that the packets are not dropped by running the following command at a command prompt on each Forefront TMG server:

    netsh tmg set global name=DontDropIPSECDetunneledTrafficToLocalhost value=1 persistentNote To revert to the default settings, run the following command:

    netsh tmg set global name=DontDropIPSECDetunneledTrafficToLocalhost value=0 persistent

Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

References

For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:

824684 Description of the standard terminology that is used to describe Microsoft software updates

Нужна дополнительная помощь?

Нужны дополнительные параметры?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.

Communities help you ask and answer questions, give feedback, and hear from experts with rich knowledge.

Были ли сведения полезными?

Что повлияло на вашу оценку?
После нажатия кнопки "Отправить" ваш отзыв будет использован для улучшения продуктов и служб Майкрософт. Эти данные будут доступны для сбора ИТ-администратору. Заявление о конфиденциальности.

Спасибо за ваш отзыв!

×