What does NTSTATUS 0xC0220038 (STATUS_FWP_INVALID_AUTH_TRANSFORM) mean?

 
Previous Next
STATUS_FWP_CALLOUT_NOTIFICATION_FAILED STATUS_FWP_INVALID_CIPHER_TRANSFORM

STATUS_FWP_INVALID_AUTH_TRANSFORM

The IPsec authentication transform is not valid

Authentication transforms define integrity and authentication algorithms for IPsec negotiation. This status means the transform description is malformed or not accepted before compatibility with the peer is even considered.

Capture the authentication transform identifier supplied to WFP and compare it with the transforms valid for the selected mode and proposal. A malformed transform value should be corrected at the policy producer.

What to inspect

  • Validate algorithm identifiers and transform structure fields.
  • Compare policy against supported Windows IPsec suites.
  • Separate invalid transform syntax from peer negotiation failure.

References for STATUS_FWP_INVALID_AUTH_TRANSFORM


Looking for a different code? Search another status or error code.