IPSEC changes in Service Pack 2

[Jones]

We use a small utility from a company called ReefEdge
that authenticates users and allows access to our wireless
network. It is called the MDU or Mobile Domain Utility
client. Basically, using IPSEC it authenticates a user's
domain login and allows a user to use the wireless
network. After installing Windows XP Service Pack 2, it
no longer works. Uninstalling SP2 fixes the issue. So
what is changed with IPSec in SP 2 that may be causing
this problem?

Any ideas....?

-Jones

 

[Carey Frisch [MVP]]

Your inquiry cannot really be answered since the final
version of SP2 has not been released.

Windows XP Service Pack 2 Resources for IT Professionals
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/winxpsp2.mspx

Please repost your question in one of the SP2 beta newsgroups:

Welcome to Windows XP SP2 Technical Preview Newsgroups
http://communities.microsoft.com/newsgroups/default.asp?icp=xpsp2&slcid=us

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

------------------------------------------------------------------------

"Jones" wrote:

| We use a small utility from a company called ReefEdge
| that authenticates users and allows access to our wireless
| network. It is called the MDU or Mobile Domain Utility
| client. Basically, using IPSEC it authenticates a user's
| domain login and allows a user to use the wireless
| network. After installing Windows XP Service Pack 2, it
| no longer works. Uninstalling SP2 fixes the issue. So
| what is changed with IPSec in SP 2 that may be causing
| this problem?
|
| Any ideas....?
|
| -Jones

 

[~phil]

Your inquiry cannot really be answered since the final
version of SP2 has not been released.

Windows XP Service Pack 2 Resources for IT Professionals
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/winxpsp2.mspx

Please repost your question in one of the SP2 beta newsgroups:

Welcome to Windows XP SP2 Technical Preview Newsgroups
http://communities.microsoft.com/newsgroups/default.asp?icp=xpsp2&slcid=us

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

------------------------------------------------------------------------

FYI:

http://www.microsoft.com/presspass/press/2004/aug04/08-06WinXPSP2LaunchPR.asp

<snippet>
Microsoft Releases Windows XP Service Pack 2 with Advanced Security
Technologies to Computer Manufacturers

Company Urges Windows XP Customers to Turn on Automatic Updates to Get
the Stronger Security, Greater Manageability and Improved Experiences
of Landmark Service Pack

REDMOND, Wash. - Aug. 6, 2004 -- Microsoft Corp. today announced the
release to manufacturing of Windows® XP Service Pack 2 with Advanced
Security Technologies. This free service pack delivers the latest
security updates and innovations from Microsoft, establishes strong
default security settings, and adds new proactive protection features
that will help better safeguard computers from hackers, viruses and
other security risks.
</snippet>

 

[Christopher Black [MSFT]]

IPsec requires that inbound traffic be allowed to UPD-500 (and UDP-4500).
The default state of the Windows firewall (that is now on by default) will
block the inbound UDP500/4500 traffic. You should add a rule to allow
inbound traffic on these ports.

 

[Mark Swift [MSFT]]

IPsec in XPSP2 now automatically opens up holes in the Windows Firewall if
there is policy assigned. It also closes them if policy is then unassigned.

--

Mark Swift
Software Test Engineer
IP Security
Windows Networking
Microsoft

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm