Objective 3.4: Troubleshoot IPSec | MCSA/MCSE Self-Paced Training Kit (Exam 70-299): Implementing and Administering Security in a MicrosoftВ® Windows Server(TM) 2003 Network (Pro-Certification)

< Day Day Up >

Several tools can be used to troubleshoot IPSec. One tool that has been improved significantly in Windows Server 2003 is the IP Security Monitor Console. From this console, you are able to view security associations and determine which clients are connecting securely to the computer on which you are running the console. You are also able to determine the authentication method that they are using. Similar functionality is found by running netsh ipsec dynamic show mmsas from the command line. The netsh command, in the ipsec dynamic context, can provide a wealth of information that cannot be gained from the GUI. The netsh command can also be used to configure many aspects of IPSec that cannot be configured from the GUI, such as how to treat certificate revocation list (CRL) revocations and the configuration of IPSec logging.

< Day Day Up >