What does NTSTATUS 0xC022003D (STATUS_FWP_INVALID_TUNNEL_ENDPOINT) mean?

 
Previous Next
STATUS_FWP_DUPLICATE_AUTH_METHOD STATUS_FWP_L2_DRIVER_NOT_READY

STATUS_FWP_INVALID_TUNNEL_ENDPOINT

The tunnel endpoint does not define a valid IPsec tunnel

Tunnel-mode IPsec requires valid local and remote tunnel endpoints. This status means the endpoint configuration cannot describe a usable tunnel.

Inspect the tunnel endpoint addresses in the effective rule and the address family of the negotiated traffic. A stale, malformed, or wrong-family endpoint can invalidate an otherwise matching policy.

What to inspect

  • Check local and remote endpoint addresses and address families.
  • Ensure tunnel endpoints match the policy layer and traffic selectors.
  • Look for empty, wildcard, or mismatched IPv4/IPv6 endpoint fields.

References for STATUS_FWP_INVALID_TUNNEL_ENDPOINT


Looking for a different code? Search another status or error code.