What does Windows error code 13858 (ERROR_IPSEC_IKE_INVALID_FILTER) mean?

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: IKE received or attempted to use an invalid IPsec filter.

Previous	Next
ERROR_IPSEC_IKE_GETSPIFAIL	ERROR_IPSEC_IKE_OUT_OF_MEMORY

ERROR_IPSEC_IKE_INVALID_FILTER

ERROR_IPSEC_IKE_INVALID_FILTER (0x00003622) An IKE policy filter was malformed or inconsistent with the operation being performed. This can result from invalid endpoint selectors, incompatible address families, overlapping policy objects, or a deployment tool passing an invalid filter definition.

What to check

Review the local connection-security rules for the peer addresses, subnets, ports, protocols, and interface conditions they specify.
Compare local and peer traffic selectors; both sides must allow a compatible protected flow.
If policy is deployed by GPO or MDM, validate the source configuration rather than editing generated local state.

Get-NetIPsecQuickModeRule

Microsoft: Get-NetIPsecQuickModeRule

Microsoft: Get-NetIPsecMainModeRule

Microsoft: IPsec/IKE system error codes

Looking for a different code? Search another status or error code.