Do I need auto IPSEC for WinXP on home PC?

[Franky]

I use WinXP Pro on a home PC. Apart from a cable connection to the
internet, my PC is not connected to any other PCs.

In the Event Log I see that XP tries unsuccessfully to do something
with IPSEC. (Message ID 7023.)

In the 'Services' menu I see that IPSEC is set to start
automatically.

Should I change this to manual or to disabled?

 

[Mike Bright MSP]

Franky,

IPSEC is there for IP Security (as im sure you know). Although it's
probably not activly used if you havent configured it for anyway. However,
this is no reason to disable it, you should only switch off a service if its
effecting your performance, as this probably isn't.

Regards

Mike Bright MCP, MSP

e:[email protected]

 

[Lars M. Hansen]

On Fri, 6 Aug 2004 18:07:40 +0100, Mike Bright MSP spoketh

Franky,

IPSEC is there for IP Security (as im sure you know). Although it's
probably not activly used if you havent configured it for anyway. However,
this is no reason to disable it, you should only switch off a service if its
effecting your performance, as this probably isn't.

Regards

Mike Bright MCP, MSP

e:[email protected]

Actually, if you're not using it, you might as well disable it ...

Lars M. Hansen
www.hansenonline.net
Remove "bad" from my e-mail address to contact me.
"If you try to fail, and succeed, which have you done?"

 

[Franky]

Actually, if you're not using it, you might as well disable it
...

How would I know if I am using XP's IPSEC service or not?

 

[Tore Lund]

How would I know if I am using XP's IPSEC service or not?

You can set the startup type to Manual and monitor whether this service
is ever started.

 

[Lars M. Hansen]

On Fri, 13 Aug 2004 16:42:37 +0100, Franky spoketh

How would I know if I am using XP's IPSEC service or not?

Unless you have created and enabled any IPSec rules on your computer,
then you're not using it...

Lars M. Hansen
http://www.hansenonline.net
(replace 'badnews' with 'news' in e-mail address)

 

[Guest]

I know this is an old thread, and the advice helpful, however I don't think
Franky's question is really addressed. I would wager the event log is showing
an error. When he opens up the error he is advised that IPSec Service did not
start. The error code 7023 advised that IPSec did not start because it is not
logged in to the same XXXXX as the other elements running in that process.
Some of us do not like living with error messages, especially when it
involves a security process. PLease allow me to add the following questions:
1.) IF Franky's XP Home is not configured in a way that IPSec is needed, or
if he has not configured IPSec to "do" anything, would it be acceptable to
simply Disable IPSec?
2.) IF IPSec is not needed, but as someone above suggested don't disable a
service unless it is causing a problem, how would FRANKY address the content
of the error message ?

thank you
ptmxw

 

[Carey Frisch [MVP]]

IPSEC Services - manages IP security (IPsec) policy,
starts the Internet Key Exchange (IKE) and coordinates
IPsec policy settings with the IP security driver. Only
leave on if you are using IPSec. Opens Port 500.
Recommendation: Disabled

Ref: http://www.uksecurityonline.com/husdg/windowsxp/disableservices.htm

IPSec in Windows XP Home Edition
http://www.microsoft.com/windowsxp/...xp/home/using/productdoc/en/sag_IPSec_Ov9.asp

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect Your PC!
http://www.microsoft.com/athome/security/protect/default.aspx

----------------------------------------------------------------------------------------

:

| I know this is an old thread, and the advice helpful, however I don't think
| Franky's question is really addressed. I would wager the event log is showing
| an error. When he opens up the error he is advised that IPSec Service did not
| start. The error code 7023 advised that IPSec did not start because it is not
| logged in to the same XXXXX as the other elements running in that process.
| Some of us do not like living with error messages, especially when it
| involves a security process. PLease allow me to add the following questions:
| 1.) IF Franky's XP Home is not configured in a way that IPSec is needed, or
| if he has not configured IPSec to "do" anything, would it be acceptable to
| simply Disable IPSec?
| 2.) IF IPSec is not needed, but as someone above suggested don't disable a
| service unless it is causing a problem, how would FRANKY address the content
| of the error message ?
|
| thank you
| ptmxw
|
| "Franky" wrote:
|
| > I use WinXP Pro on a home PC. Apart from a cable connection to the
| > internet, my PC is not connected to any other PCs.
| >
| > In the Event Log I see that XP tries unsuccessfully to do something
| > with IPSEC. (Message ID 7023.)
| >
| > In the 'Services' menu I see that IPSEC is set to start
| > automatically.
| >
| > Should I change this to manual or to disabled?
| >

 

[Guest]

Carey,
thank you for the links and the help...
ptmx2