| Previous | Next |
| ERROR_IPSEC_DOSP_KEYMOD_NOT_ALLOWED | ERROR_IPSEC_DOSP_MAX_PER_IP_RATELIMIT_QUEUES |
ERROR_IPSEC_DOSP_NOT_INSTALLED
The feature is not operational merely because IPsec is present
ERROR_IPSEC_DOSP_NOT_INSTALLED means the host has no active IPsec DoS Protection configuration for the requested operation. Standard Windows IPsec, IKEEXT, firewall rules, or existing SAs do not imply that DoSP is installed and operational. The feature requires an explicit setting and at least one public-facing and one internal interface assignment.
Query Get-NetIPsecDospSetting and validate interface aliases against the current adapters. A saved configuration can become ineffective after interface rename or removal. The feature also targets a specific edge-forwarding architecture and cannot simply be enabled on an IPsec tunnel gateway whose tunnel traffic bypasses the DoSP path. Confirm placement before creating a setting.
Operational prerequisites
- An IPsec DoS Protection setting exists on the target computer.
- At least one public and one private interface are assigned.
- The host is in the forwarding path for the protected IPv6 traffic.
- The deployment is not relying on DoSP to inspect traffic that bypasses it as an IPsec gateway.
References
- Microsoft: retrieve installed DoSP settings
- Microsoft: deployment model and interface prerequisites
- Microsoft: DoSP CIM configuration class
Looking for a different code? Search another status or error code.