| DisplayName | Description | ID | Target | Parent Monitor | Category | Enabled | Instance Name | Counter Name | Frequency | Alert Generate | Alert Severity | Alert Priority | Alert Auto Resolve | Monitor Type | Remotable | Accessibility | RunAs |
| Authentication/Accounting failure Monitor | The Routing and Remote Access service encountered an error while performing authentication or accounting. | AP.Remote.Access.AuthenticationAccountingfailure | AP.Remote.Access.Class.VPNServer | System.Health.ConfigurationState | ConfigurationHealth | True | | | 0 | True | Error | Normal | True | Microsoft.Windows.SingleEventLogManualReset2StateMonitorType | True | Public | |
| Configuration failure | The Internet Group Management Protocol version 2 (IGMPv2) detected a configuration failure. | AP.Remote.Access.Configurationfailure | AP.Remote.Access.Class.VPNServer | System.Health.ConfigurationState | ConfigurationHealth | True | | | 0 | True | Error | Normal | True | Microsoft.Windows.SingleEventLogManualReset2StateMonitorType | True | Public | |
| DNS Unresponsive | Some Enterprize DNS servers used by DA for Name resolution are unresponsive | AP.Remote.Access.DA_DNS_HEURISTIC_SOME_UNRESPONSIVE | AP.Remote.Access.Class.DNS | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Hardware device error Monitor | The connection attempt failed because the device connected to the port is not responding. | AP.Remote.Access.Hardwaredeviceerror | AP.Remote.Access.Class.VPNServer | System.Health.AvailabilityState | AvailabilityHealth | True | | | 0 | True | Error | High | True | Microsoft.Windows.SingleEventLogManualReset2StateMonitorType | True | Public | |
| IPCP negotiation failure | The Routing and Remote Access service encountered an error in handing out IP address to dial-in client(s) during IP Control Protocol (IPCP) negotiation. | AP.Remote.Access.IPCPnegotiationfailure | AP.Remote.Access.Class.VPNServer | System.Health.PerformanceState | PerformanceHealth | True | | | 0 | True | Error | Normal | True | Microsoft.Windows.SingleEventLogManualReset2StateMonitorType | True | Public | |
| IPSec related failures | The connection attempt failed because a machine certificate was not found for IP Security (IPSec). | AP.Remote.Access.IPSecrelatedfailures | AP.Remote.Access.Class.VPNServer | System.Health.ConfigurationState | ConfigurationHealth | True | | | 0 | True | Error | High | True | Microsoft.Windows.SingleEventLogManualReset2StateMonitorType | True | Public | |
| Memory allocation failure | The Network Address Translation (NAT) protocol encountered a memory allocation failure. | AP.Remote.Access.Memoryallocationfailure | AP.Remote.Access.Class.VPNServer | System.Health.PerformanceState | PerformanceHealth | True | | | 0 | True | Error | High | True | Microsoft.Windows.SingleEventLogManualReset2StateMonitorType | True | Public | |
| Memory Allocation Monitor | The Routing and Remote Access service could not start or is not fully functional because of memory allocation failure. | AP.Remote.Access.MemoryAllocationFailureMonitor | AP.Remote.Access.Class.VPNServer | System.Health.PerformanceState | PerformanceHealth | True | | | 0 | True | Error | High | True | Microsoft.Windows.SingleEventLogManualReset2StateMonitorType | True | Public | |
| 6to4 Forwarding state | Forwarding is disabled on the 6to4 adapter. | AP.Remote.Access.Monitor.DA_6TO4_HEURISTIC_FORWARDING | AP.Remote.Access.Class.6to4 | System.Health.ConfigurationState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| 6to4 Adapter State | 6to4 interface is not working on the Remote Access server. | AP.Remote.Access.Monitor.DA_6TO4_HEURISTIC_INTERFACE | AP.Remote.Access.Class.6to4 | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| 6to4 - IP Helper State | The IP Helper service (iphlpsvc) has stopped, and DirectAccess might not work as expected. The IP Helper service provides tunnel connectivity using the connectivity platform, IPv6 transition technologies, and IP-HTTPS. | AP.Remote.Access.Monitor.DA_6TO4_HEURISTIC_IPHLPSVC | AP.Remote.Access.Class.6to4 | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| 6to4 Unknown Error | 6to4 Unknown Error | AP.Remote.Access.Monitor.DA_6TO4_HEURISTIC_UNKNOWN | AP.Remote.Access.Class.6to4 | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| DC availability | This checks the availablitliy/reachability of the domain controllers configured for DirectAccess | AP.Remote.Access.Monitor.DA_DC_HEURISTIC_REACHABLE | AP.Remote.Access.Class.DomainController | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Domain Controller unknown error | Domain Controller unknown error | AP.Remote.Access.Monitor.DA_DC_HEURISTIC_UNKNOWN | AP.Remote.Access.Class.DomainController | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Dns64 Disabled | DNS64 is disabled on the server. DNS64 provides access to IPv4-only servers in the corporate network. | AP.Remote.Access.Monitor.DA_DNS64_HEURISTIC_DISABLE | AP.Remote.Access.Class.DNS64 | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| DNS name resolution for IPv4 Servers | DNS name resolution for IPv4 servers failed. Direct Access clients might not be able to access IPv4-only servers in the corporate network. | AP.Remote.Access.Monitor.DA_DNS64_HEURISTIC_RESOLUTION | AP.Remote.Access.Class.DNS64 | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Dns64 translation failed | Dns64 translation failed | AP.Remote.Access.Monitor.DA_DNS64_HEURISTIC_TRANSLATION | AP.Remote.Access.Class.DNS64 | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Dns64 unknown error | Unknown error with Dns64 | AP.Remote.Access.Monitor.DA_DNS64_HEURISTIC_UNKNOWN | AP.Remote.Access.Class.DNS64 | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| All DNS Unresponsive | All DNS Servers used by DA for name resolution are unresponsive | AP.Remote.Access.Monitor.DA_DNS_HEURISTIC_ALL_UNRESPONSIVE | AP.Remote.Access.Class.DNS | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| DNS - Unknown Error | Unknown error occured with DNS infra | AP.Remote.Access.Monitor.DA_DNS_HEURISTIC_UNKNOWN | AP.Remote.Access.Class.DNS | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| DNS Unreachable | Some DNS Servers used by DA for name resolution are not responding | AP.Remote.Access.Monitor.DA_DNS_HEURISTIC_UNREACHABLE | AP.Remote.Access.Class.DNS | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| BFE service state |
Network security is not working as expected. The Base Filtering Engine (BFE) service has either been stopped, or is not responding. BFE is a service that manages firewall and IPsec policies, and implements user mode filtering. Disabling the BFE service reduces system security, and IPsec management and firewall applications might not work as expected.
| AP.Remote.Access.Monitor.DA_DOSP_HEURISTIC_BFE_DOWN | AP.Remote.Access.Class.NetworkSecurity | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| IPSec Dosp state | Check for IPsec Denial of Service Protection (DoSP) is not enabled. | AP.Remote.Access.Monitor.DA_DOSP_HEURISTIC_DOSP_DOWN | AP.Remote.Access.Class.NetworkSecurity | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| DoS Attack Check | Check to verify if a DoS attack is underway | AP.Remote.Access.Monitor.DA_DOSP_HEURISTIC_DOS_ATTACK | AP.Remote.Access.Class.NetworkSecurity | System.Health.SecurityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| IKEExt Service State | Network security is not working as expected. The IKE and AuthIP IPsec Keying Modules (IKEEXT) service was stopped, or is not responding. | AP.Remote.Access.Monitor.DA_DOSP_HEURISTIC_IKEEXT_DOWN | AP.Remote.Access.Class.NetworkSecurity | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| ICMP Queue overflow | Network Security ICMP Queue Overflow Warning. | AP.Remote.Access.Monitor.DA_DOSP_HEURISTIC_INBOUND_RATE_LIMIT_ICMPv6 | AP.Remote.Access.Class.NetworkSecurity | System.Health.SecurityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Inbound Rate Limit Discarded ICMPv6 Packets Per Sec Check | Network Security Queue Overflow Warning | AP.Remote.Access.Monitor.DA_DOSP_HEURISTIC_INBOUND_RATE_LIMIT_IPSEC_AUTH | AP.Remote.Access.Class.NetworkSecurity | System.Health.SecurityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Inbound Rate Limit Discarded IPsec UnAuth Packets per sec | The Inbound Rate Limit Discarded IPv6 IPsec Unauthenticated Packets/sec counter has exceeded a defined threshold. View this counter under IPsec DOS Protection in Performance Monitor. This counter defines the rate at which unauthenticated IKEv1, IKEv2, AuthIP, or ESP IPv6 packets received on a public adapter were discarded because they exceeded the rate limit for IPv6 IPsec unauthenticated packets per second. An unauthenticated packet is an IPsec packet without an associated state entry. A state entry is a pair of IPv6 addresses that is authorized to pass through from a public to an internal adapter. | AP.Remote.Access.Monitor.DA_DOSP_HEURISTIC_INBOUND_RATE_LIMIT_IPSEC_UNAUTH | AP.Remote.Access.Class.NetworkSecurity | System.Health.SecurityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| DoS Attack (MM) | A Denial of Service (DoS) attack might be underway. IPv6 Main Mode negotiation failures have reached warning or critical levels. | AP.Remote.Access.Monitor.DA_DOSP_HEURISTIC_MM_DOS_ATTACK | AP.Remote.Access.Class.NetworkSecurity | System.Health.SecurityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Replay Attack Check |
A network security component is under a Replay attack. A Replay attack is a form of network attack in which a valid
data transmission is maliciously or fraudulently repeated or delayed.
| AP.Remote.Access.Monitor.DA_DOSP_HEURISTIC_REPLAY_ATTACK | AP.Remote.Access.Class.NetworkSecurity | System.Health.SecurityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Spoofing Attack | A network security component is under a spoofing attack. | AP.Remote.Access.Monitor.DA_DOSP_HEURISTIC_SPOOFING_ATTACK | AP.Remote.Access.Class.NetworkSecurity | System.Health.SecurityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Current State Entries Utilization | The Current State Entries counter has exceeded critical levels. View this counter under IPsec DOS Protection in Performance Monitor. This counter defines the number of active state entries in the table. A state entry is a pair of IPv6 addresses that is authorized to pass through from a public to an internal adapter. | AP.Remote.Access.Monitor.DA_DOSP_HEURISTIC_STATE_UTILIZATION | AP.Remote.Access.Class.NetworkSecurity | System.Health.SecurityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| DOSP Unknown Error | DOSP Unknown Error | AP.Remote.Access.Monitor.DA_DOSP_HEURISTIC_UNKNOWN | AP.Remote.Access.Class.NetworkSecurity | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| External adapter forwarding state | Forwarding is not enabled on the external adapter. | AP.Remote.Access.Monitor.DA_IF_HEURISTIC_FORWARDING_WEAKHOST_EXT | AP.Remote.Access.Class.NetworkAdapters | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Internal adapter forwarding state | Check if forwarding is disabled on the internal network adapter. This might prevent remote clients from accessing internal network resources. | AP.Remote.Access.Monitor.DA_IF_HEURISTIC_FORWARDING_WEAKHOST_INT | AP.Remote.Access.Class.NetworkAdapters | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Network Adapter State | The network adapters are either disconnected or disabled. | AP.Remote.Access.Monitor.DA_IF_HEURISTIC_NW_INTERFACE | AP.Remote.Access.Class.NetworkAdapters | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Corporate network route publish | Corporate network route publish | AP.Remote.Access.Monitor.DA_IF_HEURISTIC_ROUTES | AP.Remote.Access.Class.NetworkAdapters | System.Health.ConfigurationState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Unknown Error | This monitor is a catch all for other errors | AP.Remote.Access.Monitor.DA_IF_HEURISTIC_UNKNOWN | AP.Remote.Access.Class.NetworkAdapters | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| IP-Https Cert Binding |
The certificate binding to HTTPS port 443 has changed. This certificate is used for IP-HTTPS authentication. Without the correct certificate, clients cannot connect.
| AP.Remote.Access.Monitor.DA_IPHTTPS_HEURISTIC_CERT_BINDING | AP.Remote.Access.Class.IPHTTPS | System.Health.ConfigurationState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| SSTP-IPHttps Cert Validation | The specified IP-HTTPS certificate is different from the VPN SSTP certificate. IP-HTTPS and SSTP must use the same certificate because both use port 443. | AP.Remote.Access.Monitor.DA_IPHTTPS_HEURISTIC_DIFF_SSTP_CERT | AP.Remote.Access.Class.IPHTTPS | System.Health.ConfigurationState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| IP-HttpsForwarding | Forwarding is disabled on the IP-HTTPS adapter. | AP.Remote.Access.Monitor.DA_IPHTTPS_HEURISTIC_FORWARDING | AP.Remote.Access.Class.IPHTTPS | System.Health.ConfigurationState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| IP-Https Cert Invalid | The IP-HTTPS certificate is not valid. | AP.Remote.Access.Monitor.DA_IPHTTPS_HEURISTIC_INVALID_CERT | AP.Remote.Access.Class.IPHTTPS | System.Health.ConfigurationState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| IP-Https - IP Helper Service State | The IP Helper service (iphlpsvc) has stopped. DirectAccess might not function as expected. The IP Helper service provides tunnel connectivity using the connectivity platform, IPv6 transition technologies, and IP-HTTPS. | AP.Remote.Access.Monitor.DA_IPHTTPS_HEURISTIC_IPHLPSVC | AP.Remote.Access.Class.IPHTTPS | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| IP-Https listener inactive | The IP-HTTPS listener is inactive and cannot accept connections from DirectAccess clients. | AP.Remote.Access.Monitor.DA_IPHTTPS_HEURISTIC_LISTENER | AP.Remote.Access.Class.IPHTTPS | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| IP-Https Cert Missing | The IP-HTTPS certificate is missing. | AP.Remote.Access.Monitor.DA_IPHTTPS_HEURISTIC_MISSING_CERT | AP.Remote.Access.Class.IPHTTPS | System.Health.ConfigurationState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| IP-Https Route Advertizing | Route advertisement is disabled on the IP-HTTPS adapter. | AP.Remote.Access.Monitor.DA_IPHTTPS_HEURISTIC_ROUTE_ADV | AP.Remote.Access.Class.IPHTTPS | System.Health.ConfigurationState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| IP-Https Route Publish | The IP-HTTPS route does not have published property enabled | AP.Remote.Access.Monitor.DA_IPHTTPS_HEURISTIC_ROUTE_PUB | AP.Remote.Access.Class.IPHTTPS | System.Health.ConfigurationState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| IPHTTPS Unknown error | Unknown error occured with IPHttps | AP.Remote.Access.Monitor.DA_IPHTTPS_HEURISTIC_UNKNOWN | AP.Remote.Access.Class.IPHTTPS | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| IPsec invalid cert | The certificate used for IPsec authentication is not valid. | AP.Remote.Access.Monitor.DA_IPSEC_HEURISTIC_INVALID_CERT | AP.Remote.Access.Class.IPSec | System.Health.ConfigurationState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| IPsec cert missing | There is no valid certificate to be used by IPsec which chains to the root/intermediate certificate configured to be used by IPsec in the DirectAccess configuration. | AP.Remote.Access.Monitor.DA_IPSEC_HEURISTIC_MISSING_CERT | AP.Remote.Access.Class.IPSec | System.Health.ConfigurationState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| IPSec Root Cert Missing | The certificate used for IPsec authentication is missing. | AP.Remote.Access.Monitor.DA_IPSEC_HEURISTIC_MISSING_ROOT_CERT | AP.Remote.Access.Class.IPSec | System.Health.ConfigurationState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Ports or Protocols Blocked |
Ports or protocols blocked on the internal or external network adapters are preventing Remote Access from functioning as expected.
| AP.Remote.Access.Monitor.DA_IPSEC_HEURISTIC_PORT_BLOCKED | AP.Remote.Access.Class.IPSec | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| IPSec uknown error | Unknown error with IPSec | AP.Remote.Access.Monitor.DA_IPSEC_HEURISTIC_UNKNOWN | AP.Remote.Access.Class.IPSec | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Isatap Adapter forwarding state | Forwarding is disabled on the ISATAP adapter. | AP.Remote.Access.Monitor.DA_ISATAP_HEURISTIC_FORWARDING | AP.Remote.Access.Class.ISATAP | System.Health.ConfigurationState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Isatap name publish state | The ISATAP server name cannot be resolved. | AP.Remote.Access.Monitor.DA_ISATAP_HEURISTIC_HOSTNAME_PUBLISH | AP.Remote.Access.Class.ISATAP | System.Health.ConfigurationState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| ISATAP interface unavailable | ISATAP adapter is not available. | AP.Remote.Access.Monitor.DA_ISATAP_HEURISTIC_INTERFACE | AP.Remote.Access.Class.ISATAP | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Isatap - IP Helper Service State | The IP Helper service (iphlpsvc) has stopped, and DirectAccess might not work as expected.The IP Helper service provides tunnel connectivity using the connectivity platform, IPv6 transition technologies, and IP-HTTPS. | AP.Remote.Access.Monitor.DA_ISATAP_HEURISTIC_IPHLPSVC | AP.Remote.Access.Class.ISATAP | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| ISATAP Route Advertising | Route advertising is disabled on the ISATAP router. | AP.Remote.Access.Monitor.DA_ISATAP_HEURISTIC_ROUTE_ADV | AP.Remote.Access.Class.ISATAP | System.Health.ConfigurationState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| ISATAP route publish | The ISATAP route is not published. | AP.Remote.Access.Monitor.DA_ISATAP_HEURISTIC_ROUTE_PUB | AP.Remote.Access.Class.ISATAP | System.Health.ConfigurationState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Isatap Unknown Error | Catch all error for ISATAP | AP.Remote.Access.Monitor.DA_ISATAP_HEURISTIC_UNKNOWN | AP.Remote.Access.Class.ISATAP | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Kerberos Authentication Blocked |
Ports required for Kerberos authentication are blocked. Kerberos authentication is required to authenticate clients using Kerberos proxy on this server. \
For clients to communicate with the proxy, firewalls must allow HTTPS traffic (port 443 by default). The Kerberos proxy must be able to send Kerberos authentication protocol traffic via port 88, and Kerberos change password protocol traffic via port 464 to domain controllers.
| AP.Remote.Access.Monitor.DA_KERB_HEURISTIC_AUTH | AP.Remote.Access.Class.Kerberos | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Kerberos certificate binding |
The certificate binding for HTTPS Port 443 has changed. This certificate is used to authenticate remote clients with Kerberos. Without the correct certificate,
authentication of remote clients connecting via DirectAccess will not work as expected.
| AP.Remote.Access.Monitor.DA_KERB_HEURISTIC_CERT_BINDING | AP.Remote.Access.Class.Kerberos | System.Health.ConfigurationState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Kerberos Certificate Invalid | The certificate used for Kerberos authentication is not valid. | AP.Remote.Access.Monitor.DA_KERB_HEURISTIC_INVALID_CERT | AP.Remote.Access.Class.Kerberos | System.Health.ConfigurationState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| KDC Proxy Server (kpssvc) service state |
A network authentication service (kpssvc) is not available. This service helps in authenticating DirectAccess clients when they connect to the
corporate network via DirectAccess.
| AP.Remote.Access.Monitor.DA_KERB_HEURISTIC_KERB_DOWN | AP.Remote.Access.Class.Kerberos | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Kerberos certificate missing | The certificate used for Kerberos authentication is missing. | AP.Remote.Access.Monitor.DA_KERB_HEURISTIC_MISSING_CERT | AP.Remote.Access.Class.Kerberos | System.Health.ConfigurationState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Kerberos unkown error | Kerberos unkown error | AP.Remote.Access.Monitor.DA_KERB_HEURISTIC_UNKNOWN | AP.Remote.Access.Class.Kerberos | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Management Servers Unreachable |
All management servers are unavailable or not responding.
Updates required for DirectAccess client compliance might not work as expected.
| AP.Remote.Access.Monitor.DA_MGMTSRV_HEURISTIC_ALL_UNREACHABLE | AP.Remote.Access.Class.ManagementServers | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Some Mgmt Servers Unavailable | One or more management servers are unavailable or not responding. Updates required for corporate compliance of DirectAccess client computers might not work as expected. | AP.Remote.Access.Monitor.DA_MGMTSRV_HEURISTIC_SOME_UNREACHABLE | AP.Remote.Access.Class.ManagementServers | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Management Server unknown error | An unknown error occured with one of the Management Servers | AP.Remote.Access.Monitor.DA_MGMTSRV_HEURISTIC_UNKNOWN | AP.Remote.Access.Class.ManagementServers | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Nat64 Connectivity | NAT64 connectivity failed. DirectAccess clients might not be able to access IPv4-only servers in the corporate network. | AP.Remote.Access.Monitor.DA_NAT64_HEURISTIC_CONNECTION | AP.Remote.Access.Class.NAT64 | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Nat64 disabled | NAT64 is disabled on the server. NAT64 is used to provide access to IPv4-only servers in the corporate network. | AP.Remote.Access.Monitor.DA_NAT64_HEURISTIC_DISABLE | AP.Remote.Access.Class.NAT64 | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Nat64 Transalation |
NAT64 translation failures might be preventing remote clients from accessing IPv4-only servers in the corporate network.
| AP.Remote.Access.Monitor.DA_NAT64_HEURISTIC_TRANSLATION | AP.Remote.Access.Class.NAT64 | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Nat64 unknown error | An unknown error occured with Nat64 | AP.Remote.Access.Monitor.DA_NAT64_HEURISTIC_UNKNOWN | AP.Remote.Access.Class.NAT64 | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| NLS cert binding modified | The certificate binding for the network location server has been modified. Without the correct certificate, connectivity for DirectAccess clients located in the internal network will not work as expected. | AP.Remote.Access.Monitor.DA_NLS_HEURISTIC_CERT_BINDING | AP.Remote.Access.Class.NetworkLocationServer | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| NLS cert invalid | The network location server certificate is not valid. Connectivity for DirectAccess clients located in the internal network will not work as expected. | AP.Remote.Access.Monitor.DA_NLS_HEURISTIC_INVALID_CERT | AP.Remote.Access.Class.NetworkLocationServer | System.Health.ConfigurationState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| NLS DNS entry invalid | The network location server does not have a valid DNS entry. DirectAccess clients located in the corporate network will not be able to resolve the server name, and internal network connectivity will not work as expected. | AP.Remote.Access.Monitor.DA_NLS_HEURISTIC_INVALID_DNS_ENTRY | AP.Remote.Access.Class.NetworkLocationServer | System.Health.ConfigurationState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| NLS cert not found | The certificate configured for the network location server cannot be found. DirectAccess clients located in the corporate network might experience connectivity issues. | AP.Remote.Access.Monitor.DA_NLS_HEURISTIC_MISSING_CERT | AP.Remote.Access.Class.NetworkLocationServer | System.Health.ConfigurationState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| NLS Reachability |
The network location server is unavailable or not responding. This might disrupt DirectAccess connectivity, and connectivity \
for DirectAccess clients located inside the corporate network.
| AP.Remote.Access.Monitor.DA_NLS_HEURISTIC_REACHABLE | AP.Remote.Access.Class.NetworkLocationServer | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| NLS unkown erros | An unknown error occured with Network Location Server | AP.Remote.Access.Monitor.DA_NLS_HEURISTIC_UNKNOWN | AP.Remote.Access.Class.NetworkLocationServer | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| NLS URL Availability | There is no response from the network location server URL. DirectAccess connectivity might not work as expected, and DirectAccess clients located inside the corporate network might not be able to reach internal resources | AP.Remote.Access.Monitor.DA_NLS_HEURISTIC_URL_AVAILABLE | AP.Remote.Access.Class.NetworkLocationServer | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| CA server reachability | A connection cannot be established to any of the CA servers from Remote Access server. | AP.Remote.Access.Monitor.DA_OTP_HEURISTIC_ANY_CA | AP.Remote.Access.Class.Otp | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Radius Server Connectivity | A connection cannot be established to any of the RADIUS servers from Remote Access server. | AP.Remote.Access.Monitor.DA_OTP_HEURISTIC_ANY_RADIUS | AP.Remote.Access.Class.Otp | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| OTP ISAPI extension state | The OTP authentication ISAPI extension has stopped, and DirectAccess cannot function as expected. | AP.Remote.Access.Monitor.DA_OTP_HEURISTIC_AUTH_RUNNING | AP.Remote.Access.Class.Otp | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Otp Certificate template configuration | Otp Certificate template configuration | AP.Remote.Access.Monitor.DA_OTP_HEURISTIC_CERT_TEMPLATE_BAD | AP.Remote.Access.Class.Otp | System.Health.ConfigurationState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Certificate template availability | Certificate template availability | AP.Remote.Access.Monitor.DA_OTP_HEURISTIC_CERT_TEMPLATE_GONE | AP.Remote.Access.Class.Otp | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| CA server configuration state | A CA server used for OTP authentication is configured incorrectly. | AP.Remote.Access.Monitor.DA_OTP_HEURISTIC_CURRENT_CA_BAD | AP.Remote.Access.Class.Otp | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| CA server availability | A connection cannot be established to CA a server used for OTP authentication. | AP.Remote.Access.Monitor.DA_OTP_HEURISTIC_CURRENT_CA_GONE | AP.Remote.Access.Class.Otp | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| RADIUS server availability |
A connection to a RADIUS server configured for OTP authentication cannot be established.
| AP.Remote.Access.Monitor.DA_OTP_HEURISTIC_CURRENT_RADIUS | AP.Remote.Access.Class.Otp | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| OTP exemption state | The security group defined for users exempt from two-factor authentication does not exist | AP.Remote.Access.Monitor.DA_OTP_HEURISTIC_EXCLUDED_USERS | AP.Remote.Access.Class.Otp | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| OTP ISAPI SSL state | The OTP authentication ISAPI extension is not configured correctly, and DirectAccess cannot function as expected. | AP.Remote.Access.Monitor.DA_OTP_HEURISTIC_ISAPI_SSL_STATE | AP.Remote.Access.Class.Otp | System.Health.ConfigurationState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| OTP signing certificate configuration | The OTP signing certificate is missing or configured incorrectly. | AP.Remote.Access.Monitor.DA_OTP_HEURISTIC_OTP_SIGN_CERT_TEMPLATE_BAD | AP.Remote.Access.Class.Otp | System.Health.ConfigurationState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Unknown OTP error | Unknown OTP error | AP.Remote.Access.Monitor.DA_OTP_HEURISTIC_UNKNOWN | AP.Remote.Access.Class.Otp | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Teredo Server Forwarding | Forwarding is disabled on the Teredo server. | AP.Remote.Access.Monitor.DA_TEREDOSRV_HEURISTIC_FORWARDING | AP.Remote.Access.Class.Teredo | System.Health.ConfigurationState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Teredo Server Initialization Failed | The Teredo server cannot be started. | AP.Remote.Access.Monitor.DA_TEREDOSRV_HEURISTIC_INIT_FAILED | AP.Remote.Access.Class.Teredo | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Teredo Server IP address validity | The Teredo server primary or secondary IPv4 addresses are invalid. | AP.Remote.Access.Monitor.DA_TEREDOSRV_HEURISTIC_INVALID_IP_ADDR | AP.Remote.Access.Class.Teredo | System.Health.ConfigurationState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Teredo Server - IP Helper Service State |
The IP Helper service (iphlpsvc) has stopped. DirectAccess might not function as expected.
The IP Helper service provides tunnel connectivity using the connectivity platform, IPv6 transition technologies, and IP-HTTPS.
| AP.Remote.Access.Monitor.DA_TEREDOSRV_HEURISTIC_IPHLPSVC | AP.Remote.Access.Class.Teredo | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Teredo Server Stopped | The Teredo server has stopped. | AP.Remote.Access.Monitor.DA_TEREDOSRV_HEURISTIC_SRV_STOPPED | AP.Remote.Access.Class.Teredo | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Teredo Server Unknown Error | Catch all for all other errors with teredo server | AP.Remote.Access.Monitor.DA_TEREDOSRV_HEURISTIC_UNKNOWN | AP.Remote.Access.Class.Teredo | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| NLB driver state | Services required for remote access servers to work as expected in the cluster are not running. Remote clients will not be able to connect to the internal network via this server. | AP.Remote.Access.Monitor.RA_NLB_HEURISTIC_DRIVER_RUNNING | AP.Remote.Access.Class.HighAvailability | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| NLB state | The cluster state on this server is stopped, suspended, draining or converging. | AP.Remote.Access.Monitor.RA_NLB_HEURISTIC_STATE | AP.Remote.Access.Class.HighAvailability | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| NLB service state | Services required for remoteaccess to work as expected in the cluster are not running. Remote clients will not be able to connect to the internal network via this server. | AP.Remote.Access.Monitor.RA_NLB_HEURISTIC_SVC_RUNNING | AP.Remote.Access.Class.HighAvailability | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Nlb Unknown error | An unknown error occured with NLB | AP.Remote.Access.Monitor.RA_NLB_HEURISTIC_UNKNOWN | AP.Remote.Access.Class.HighAvailability | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Service availability | Check if the services required for proper functioning of the server are running | AP.Remote.Access.Monitor.RA_SVC_HEURISTIC_RUNNING | AP.Remote.Access.Class.Services | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Server Configuration | Remote Access failed to apply server specific settings. | AP.Remote.Access.Monitor.RA_SVC_HEURISTIC_TASK_STATE | AP.Remote.Access.Class.Services | System.Health.ConfigurationState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| Services unknown error | An error occured with the services essential to running DA | AP.Remote.Access.Monitor.RA_SVC_HEURISTIC_UNKNOWN | AP.Remote.Access.Class.Services | System.Health.AvailabilityState | Custom | True | | | 0 | True | Error | Normal | True | AP.Remote.Access.Monitor.HeuristicMonitorType | True | Public | |
| No more licenses monitor | A user was unable to connect to the Routing and Remote Access server as the server has exceeded its client license limit. | AP.Remote.Access.Nomorelicenses | AP.Remote.Access.Class.VPNServer | System.Health.PerformanceState | PerformanceHealth | True | | | 0 | True | Warning | Normal | True | Microsoft.Windows.SingleEventLogManualReset2StateMonitorType | True | Public | |
| Packet filter related failure | The Routing and Remote Access service encountered an error while configuring packet filter. | AP.Remote.Access.Packetfilterrelatedfailure | AP.Remote.Access.Class.VPNServer | System.Health.ConfigurationState | ConfigurationHealth | True | | | 0 | True | Error | High | True | Microsoft.Windows.SingleEventLogManualReset2StateMonitorType | True | Public | |
| Protocol initialization failure | The Internet Group Management Protocol version 2 (IGMPv2) encountered an error during initialization. | AP.Remote.Access.Protocolinitializationfailure | AP.Remote.Access.Class.VPNServer | System.Health.AvailabilityState | AvailabilityHealth | True | | | 0 | True | Error | High | True | Microsoft.Windows.SingleEventLogManualReset2StateMonitorType | True | Public | |
| Rasman port open failure Monitor | The Routing and Remote Access service or The Remote Access Connection Manager service encountered an error while opening a port for remote access. | AP.Remote.Access.RasmanPortPpenFailure | AP.Remote.Access.Class.VPNServer | System.Health.PerformanceState | PerformanceHealth | True | | | 0 | True | Error | Normal | True | Microsoft.Windows.SingleEventLogManualReset2StateMonitorType | True | Public | |
| Remote Access Connection Manager Unexpectedly Terminated Monitor | The Remote Access Manager (Rasman) service was unexpectedly terminated. | AP.Remote.Access.RasmanUnexpectedTerminatedMonitor | AP.Remote.Access.Class.VPNServer | System.Health.AvailabilityState | AvailabilityHealth | True | | | 0 | True | Error | High | True | Microsoft.Windows.2SingleEventLog2StateMonitorType | True | Public | |
| Routing and Remote Access Unexpectedly Terminated Monitor | The Remote Access (RemoteAccess) service was unexpectedly terminated. | AP.Remote.Access.RemoteAccessUnexpectedTerminatedMonitor | AP.Remote.Access.Class.VPNServer | System.Health.AvailabilityState | AvailabilityHealth | True | | | 0 | True | Error | High | True | Microsoft.Windows.2SingleEventLog2StateMonitorType | True | Public | |
| Routing and Remote Access Service Monitor | The Remote Access (Remote Access) service is not running. | AP.Remote.Access.ServiceMonitor | AP.Remote.Access.Class.VPNServer | System.Health.AvailabilityState | AvailabilityHealth | True | | | 0 | True | Error | High | True | Microsoft.Windows.CheckNTServiceStateMonitorType | True | Public | |