ERROR_IPSEC_AUTH_FIREWALL_DROP - 13917 (0x365D)

IPsec dropped an incoming ESP packet in authenticated firewall mode. This drop is benign.

Updated: Feb 21, 2026

Technical Meaning

The error code ERROR_IPSEC_AUTH_FIREWALL_DROP with the numeric value 13917 and hexadecimal representation 0x365D indicates that an incoming Encapsulating Security Payload (ESP) packet was dropped by the IPsec service in authenticated firewall mode. This drop is considered benign, meaning it does not necessarily indicate a failure or error condition.

Error Details

The IPsec protocol is used to provide security services for Internet Protocol (IP) communications. When operating in authenticated firewall mode, IPsec can inspect and potentially drop packets based on security policies configured by the administrator. In this context, the packet was dropped because it did not meet certain criteria set by the security policy.

Usage Context

This error code is typically encountered when troubleshooting or monitoring network traffic that involves IPsec-secured communications. It may be logged in system event logs or reported through other diagnostic tools used to monitor network security and integrity.

Developer Interpretation

Developers should interpret this error as a normal operational behavior of the IPsec service, indicating that a packet was dropped due to policy enforcement. This does not necessarily require corrective action unless the application or service relying on the packet is experiencing issues.

Related Errors

  • ERROR_IPSEC_AUTH_FAILURE (0x80350401): Authentication failure during IPsec processing.
  • ERROR_IPSEC_KEY_EXCHANGE_FAILED (0x80350402): Key exchange failure in IPsec.

FAQ

Q: What does the ERROR_IPSEC_AUTH_FIREWALL_DROP error mean?

A: It indicates that an ESP packet was dropped by the IPsec service in authenticated firewall mode, which is a normal operational behavior and not necessarily indicative of a failure.

Q: Is this error critical?

A: No, it is considered benign. However, if related issues are observed, further investigation may be warranted.

Summary

The ERROR_IPSEC_AUTH_FIREWALL_DROP error code signifies that an IPsec-secured packet was dropped in authenticated firewall mode. This behavior is normal and does not indicate a failure unless other issues are present. Developers should interpret this as part of the expected operation of the IPsec service.