Consider the following scenario:

• In a network environment, you configure the Internet Protocol security (IPsec) policy to use the tunnel mode.
• In the IP Filter Properties dialog box of the IPsec policy, you use a subnet address for the Source Address or for the Destination Address.
• You try to establish the IPsec tunnel-mode connection to a partner computer from a Windows Vista-based computer or from a Windows Server 2008-based computer.

In this scenario, the computer cannot negotiate the security mode with the partner computer. Therefore, you cannot use IPsec to secure the connection.

ITsVISTA

KB946887

Related posts

• ANS and Security Bulletin Updates
• Writing Secure Code for Windows Vista
• 21 months later, Vista is still more secure than XP | Ed Bott’s Microsoft Report | ZDNet.com
• Are the NSA’s Contributions to Vista Limited to Security?
• KB977165