Troubleshooting/Monitoring Certificates-based IPSEC

hi,

could tell me how can monitor , troubleshoot certificate-based ipcsec. did labs explaining deployment of ipsec between dns client et server. see link below :

http://technet.microsoft.com/en-us/library/ee649268%28v=ws.10%29.aspx

i completed configuration. but, unfortunately, have no idea of making sure ipsec working fine when configured gpo , ad cs certificates. and, how troubleshoot ?

thanks in adavance !

1- ipsec work between 2 computers, there needs matching ipsec policy configured in both systems.

2- subsystems in windows platform have ability define implicit/automatic ipsec rules, example built-in l2tp/ipsec vpn component. other components might require ipsec still need policy configured in wfas work dnssec , nrpt features mentioning.

3- endpoint in , ipsec connection allowed monitor it's own connections regardless other party.

/hasain

Windows Server  >  Security