What does Windows error code 13863 (ERROR_IPSEC_IKE_INVALID_SITUATION) mean?

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: The peer sent an unsupported IKE situation value.

Previous	Next
ERROR_IPSEC_IKE_UNKNOWN_DOI	ERROR_IPSEC_IKE_DH_FAILURE

ERROR_IPSEC_IKE_INVALID_SITUATION

ERROR_IPSEC_IKE_INVALID_SITUATION (0x00003627) During legacy IKEv1 processing, Windows received a situation field that does not match the supported IPsec interpretation. This normally indicates a peer implementation or policy-compatibility problem.

What to check

Compare the IKE/IPsec policy exported by both endpoints, including protocol version and proposal types.
Check whether an older gateway or template is forcing obsolete IKEv1 settings.
Capture the negotiation to identify the exact payload that differs before changing broad firewall policy.

netsh trace start capture=yes scenario=InternetClient

Microsoft: Netsh network tracing

Microsoft: Audit IPsec Main Mode

Microsoft: IPsec/IKE system error codes

Looking for a different code? Search another status or error code.