| Previous | Next |
| FWP_E_NOTIFICATION_DROPPED | FWP_E_INCOMPATIBLE_SA_STATE |
FWP_E_TRAFFIC_MISMATCH
FWP_E_TRAFFIC_MISMATCH is returned when an IPsec security-association context is used again with traffic parameters that differ from the original ones. WFP requires the same traffic description for repeated operations on that context.
What to verify
- Keep the original traffic selector data with the SA context and reuse it exactly for follow-up calls.
- Check address family, local/remote addresses, ports, protocols, and direction for accidental changes.
- If the traffic selectors truly changed, create a new security-association context instead of mutating the existing one.
Microsoft: capture IPsec events with netsh wfp
Looking for a different code? Search another status or error code.