Unit Monitors

Name Enabled Target Class Alert Message Description
Unit Monitor   6to4 - IP Helper State
1
 
6to4 6to4 - IP Helper Service Stopped The IP Helper service (iphlpsvc) has stopped, and DirectAccess might not work as expected. The IP Helper service provides tunnel connectivity using the connectivity platform, IPv6 transition technologies, and IP-HTTPS.
Unit Monitor   6to4 Adapter State
1
 
6to4 6to4 interface not working 6to4 interface is not working on the Remote Access server.
Unit Monitor   6to4 Forwarding state
1
 
6to4 6to4 Forwarding Disabled Forwarding is disabled on the 6to4 adapter.
Unit Monitor   6to4 Unknown Error
1
 
6to4 6to4 Unknown Error  
Unit Monitor   All Dns unresponsive
1
 
DNS All Dns Unresponsive All DNS Servers used by DA for name resolution are unresponsive
Unit Monitor   Authentication/Accounting failure Monitor
1
 
VPNServer Authentication/Accounting failure Monitor The Routing and Remote Access service encountered an error while performing authentication or accounting.
Unit Monitor   BFE service state
1
 
NetworkSecurity BFE Service Down Network security is not working as expected. The Base Filtering Engine (BFE) service has either been stopped, or is not responding. BFE is a service that manages firewall and IPsec policies, and implements user mode filtering. Disabling the BFE service reduces system security, and IPsec management and firewall applications might not work as expected.
Unit Monitor   CA server availability
1
 
Otp CA server unavailable A connection cannot be established to CA a server used for OTP authentication.
Unit Monitor   CA server configuration state
1
 
Otp CA server configuration error A CA server used for OTP authentication is configured incorrectly.
Unit Monitor   CA server reachability
1
 
Otp CA server unreachable A connection cannot be established to any of the CA servers from Remote Access server.
Unit Monitor   Certificate template availability
1
 
Otp Certificate template unavailable  
Unit Monitor   Configuration failure
1
 
VPNServer Configuration failure The Internet Group Management Protocol version 2 (IGMPv2) detected a configuration failure.
Unit Monitor   Corporate network route publish
1
 
NetworkAdapters Corporate network route publish  
Unit Monitor   Current State Entries Utilization
1
 
NetworkSecurity Current State Entries Utilization Critical The Current State Entries counter has exceeded critical levels. View this counter under IPsec DOS Protection in Performance Monitor. This counter defines the number of active state entries in the table. A state entry is a pair of IPv6 addresses that is authorized to pass through from a public to an internal adapter.
Unit Monitor   DC availability
1
 
DomainController Domain Controller Unreachable This checks the availablitliy/reachability of the domain controllers configured for DirectAccess
Unit Monitor   DNS - Unknown Error
1
 
DNS DNS - Unknown Error Unknown error occured with DNS infra
Unit Monitor   DNS name resolution for IPv4 Servers
1
 
DNS64 Dns64 name resolution DNS name resolution for IPv4 servers failed. DirectAccess clients might not be able to access IPv4-only servers in the corporate network.
Unit Monitor   DNS Unreachable
1
 
DNS DNS unreachable Some DNS Servers used by DA for name resolution are not responding
Unit Monitor   DNS Unresponsive
1
 
DNS Some Dns servers unresponsive Some Enterprize DNS servers used by DA for Name resolution are unresponsive
Unit Monitor   Dns64 Disabled
1
 
DNS64 Dns64 disabled DNS64 is disabled on the server. DNS64 provides access to IPv4-only servers in the corporate network.
Unit Monitor   Dns64 translation failed
1
 
DNS64 Dns64 translation failed  
Unit Monitor   Dns64 unknown error
1
 
DNS64 Dns64 Unknown Error unknown error with Dns64
Unit Monitor   Domain Controller unknown error
1
 
DomainController Domain Controller unknown error  
Unit Monitor   DoS Attack (MM)
1
 
NetworkSecurity Potential DoS Attack (MM) A Denial of Service (DoS) attack might be underway. IPv6 Main Mode negotiation failures have reached warning or critical levels.
Unit Monitor   DoS Attack Check
1
 
NetworkSecurity Potential DoS attack Check to verify if a DoS attack is underway
Unit Monitor   DOSP Unknown Error
1
 
NetworkSecurity DOSP Unknown Error  
Unit Monitor   External adapter forwarding state
1
 
NetworkAdapters External adapter forwarding state Forwarding is not enabled on the external adapter.
Unit Monitor   Hardware device error Monitor
1
 
VPNServer Hardware device error Monitor The connection attempt failed because the device connected to the port is not responding.
Unit Monitor   ICMP Queue overflow
1
 
NetworkSecurity ICMP Queue Overflow Network Security ICMP Queue Overflow Warning.
Unit Monitor   IKEExt Service State
1
 
NetworkSecurity IKEExt Service Down Network security is not working as expected. The IKE and AuthIP IPsec Keying Modules (IKEEXT) service was stopped, or is not responding.
Unit Monitor   Inbound Rate Limit Discarded ICMPv6 Packets Per Sec Check
1
 
NetworkSecurity Inbound Rate Limit Discarded ICMPv6 Packets Per Sec Network Security Queue Overflow Warning
Unit Monitor   Inbound Rate Limit Discarded IPsec UnAuth Packets per sec
1
 
NetworkSecurity Inbound Rate Limit Discarded IPsec UnAuth Packets Per sec The Inbound Rate Limit Discarded IPv6 IPsec Unauthenticated Packets/sec counter has exceeded a defined threshold. View this counter under IPsec DOS Protection in Performance Monitor. This counter defines the rate at which unauthenticated IKEv1, IKEv2, AuthIP, or ESP IPv6 packets received on a public adapter were discarded because they exceeded the rate limit for IPv6 IPsec unauthenticated packets per second. An unauthenticated packet is an IPsec packet without an associated state entry. A state entry is a pair of IPv6 addresses that is authorized to pass through from a public to an internal adapter.
Unit Monitor   Internal adapter forwarding state
1
 
NetworkAdapters Internal adapter forwarding disabled Check if forwarding is disabled on the internal network adapter. This might prevent remote clients from accessing internal network resources.
Unit Monitor   IPCP negotiation failure
1
 
VPNServer IPCP negotiation failure The Routing and Remote Access service encountered an error in handing out IP address to dial-in client(s) during IP Control Protocol (IPCP) negotiation.
Unit Monitor   IP-Https - IP Helper Service State
1
 
IP-HTTPS IP-Https - IP Helper Service Stopped The IP Helper service (iphlpsvc) has stopped. DirectAccess might not function as expected. The IP Helper service provides tunnel connectivity using the connectivity platform, IPv6 transition technologies, and IP-HTTPS.
Unit Monitor   IP-Https Cert Binding
1
 
IP-HTTPS IP-Https cert binding changed The certificate binding to HTTPS port 443 has changed. This certificate is used for IP-HTTPS authentication. Without the correct certificate, clients cannot connect.
Unit Monitor   IP-Https Cert Invalid
1
 
IP-HTTPS IP-Https cert invalid The IP-HTTPS certificate is not valid.
Unit Monitor   IP-Https Cert Missing
1
 
IP-HTTPS IP-Https cert missing The IP-HTTPS certificate is missing.
Unit Monitor   IP-Https listener inactive
1
 
IP-HTTPS IP-Https listener inactive The IP-HTTPS listener is inactive and cannot accept connections from DirectAccess clients.
Unit Monitor   IP-Https Route Advertizing
1
 
IP-HTTPS Route advertisement disabled on IP-Https adapter Route advertisement is disabled on the IP-HTTPS adapter.
Unit Monitor   IP-Https Route Publish
1
 
IP-HTTPS IP-Https route pulishing disabled The IP-HTTPS route does not have published property enabled
Unit Monitor   IPHTTPS Unknown error
1
 
IP-HTTPS IP-Https unknown error Unknown error occured with IPHttps
Unit Monitor   IP-HttpsForwarding
1
 
IP-HTTPS Forwarding disabled on IP-Https adapter Forwarding is disabled on the IP-HTTPS adapter.
Unit Monitor   IPsec cert missing
1
 
IPSec IPsec cert missing There is no valid certificate to be used by IPsec which chains to the root/intermediate certificate configured to be used by IPsec in the DirectAccess configuration.
Unit Monitor   IPSec Dosp state
1
 
NetworkSecurity IP-Sec DoSP not enabled Check for IPsec Denial of Service Protection (DoSP) is not enabled.
Unit Monitor   IPsec invalid cert
1
 
IPSec IPsec cert invalid The certificate used for IPsec authentication is not valid.
Unit Monitor   IPSec related failures
1
 
VPNServer IPSec related failures The connection attempt failed because a machine certificate was not found for IP Security (IPSec).
Unit Monitor   IPSec Root Cert Missing
1
 
IPSec IPSec root cert missing The certificate used for IPsec authentication is missing.
Unit Monitor   IPSec uknown error
1
 
IPSec IPsec unknown error Unknown error with IPSec
Unit Monitor   Isatap - IP Helper Service State
1
 
ISATAP Isatap - IP Helper Service Stopped The IP Helper service (iphlpsvc) has stopped, and DirectAccess might not work as expected.The IP Helper service provides tunnel connectivity using the connectivity platform, IPv6 transition technologies, and IP-HTTPS.
Unit Monitor   Isatap Adapter forwarding state
1
 
ISATAP Isatap forwarding disabled Forwarding is disabled on the ISATAP adapter.
Unit Monitor   ISATAP interface unavailable
1
 
ISATAP ISATAP Interface unavailable ISATAP adapter is not available.
Unit Monitor   Isatap name publish state
1
 
ISATAP Isatap name resolution failed The ISATAP server name cannot be resolved.
Unit Monitor   ISATAP Route Advertising
1
 
ISATAP ISATAP- Route advertising Route advertising is disabled on the ISATAP router.
Unit Monitor   ISATAP route publish
1
 
ISATAP ISATAP route publish The ISATAP route is not published.
Unit Monitor   Isatap Unknown Error
1
 
ISATAP Isatap Unknown Error Catch all error for ISATAP
Unit Monitor   KDC Proxy Server (kpssvc) service state
1
 
Kerberos Kpssvc service not available A network authentication service (kpssvc) is not available. This service helps in authenticating DirectAccess clients when they connect to the corporate network via DirectAccess.
Unit Monitor   Kerberos Authentication Blocked
1
 
Kerberos Kerberos authentication blocked Ports required for Kerberos authentication are blocked. Kerberos authentication is required to authenticate clients using Kerberos proxy on this server. \ For clients to communicate with the proxy, firewalls must allow HTTPS traffic (port 443 by default). The Kerberos proxy must be able to send Kerberos authentication protocol traffic via port 88, and Kerberos change password protocol traffic via port 464 to domain controllers.
Unit Monitor   Kerberos certificate binding
1
 
Kerberos Kerberos cert binding has changed The certificate binding for HTTPS Port 443 has changed. This certificate is used to authenticate remote clients with Kerberos. Without the correct certificate, authentication of remote clients connecting via DirectAccess will not work as expected.
Unit Monitor   Kerberos Certificate Invalid
1
 
Kerberos Kerberos cert invalid The certificate used for Kerberos authentication is not valid.
Unit Monitor   Kerberos certificate missing
1
 
Kerberos Kerberos cert missing The certificate used for Kerberos authentication is missing.
Unit Monitor   Kerberos unkown error
1
 
Kerberos Kerberos uknown error  
Unit Monitor   Management Server unknown error
1
 
ManagementServers Mgmt Server unknown error An unknown error occured with one of the Management Servers
Unit Monitor   Management Servers Unreachable
1
 
ManagementServers Mgmt Servers Unreachable All management servers are unavailable or not responding. Updates required for DirectAccess client compliance might not work as expected.
Unit Monitor   Memory allocation failure
1
 
VPNServer Memory allocation failure The Network Address Translation (NAT) protocol encountered a memory allocation failure.
Unit Monitor   Memory Allocation Monitor
1
 
VPNServer Memory Allocation Monitor The Routing and Remote Access service could not start or is not fully functional because of memory allocation failure.
Unit Monitor   Nat64 Connectivity
1
 
NAT64 Nat64 connectivity failed NAT64 connectivity failed. DirectAccess clients might not be able to access IPv4-only servers in the corporate network.
Unit Monitor   Nat64 disabled
1
 
NAT64 Nat64 disabled NAT64 is disabled on the server. NAT64 is used to provide access to IPv4-only servers in the corporate network.
Unit Monitor   Nat64 Transalation
1
 
NAT64 NAT64 translation failures NAT64 translation failures might be preventing remote clients from accessing IPv4-only servers in the corporate network.
Unit Monitor   Nat64 unknown error
1
 
NAT64 Nat64 unknown error An unknown error occured with Nat64
Unit Monitor   Network Adapter State
1
 
NetworkAdapters Network adapter disabled The network adapters are either disconnected or disabled.
Unit Monitor   NLB driver state
1
 
HighAvailability NLB driver unavailable Services required for remote access servers to work as expected in the cluster are not running. Remote clients will not be able to connect to the internal network via this server.
Unit Monitor   NLB service state
1
 
HighAvailability NLB service unavailable Services required for remoteaccess to work as expected in the cluster are not running. Remote clients will not be able to connect to the internal network via this server.
Unit Monitor   NLB state
1
 
HighAvailability NLB Service unavailable The cluster state on this server is stopped, suspended, draining or converging.
Unit Monitor   Nlb Unknown error
1
 
HighAvailability NLB unknown error An unknown error occured with NLB
Unit Monitor   NLS cert binding modified
1
 
NetworkLocationServer NLS cert binding modified The certificate binding for the network location server has been modified. Without the correct certificate, connectivity for DirectAccess clients located in the internal network will not work as expected.
Unit Monitor   NLS cert invalid
1
 
NetworkLocationServer NLS cert invalid The network location server certificate is not valid. Connectivity for DirectAccess clients located in the internal network will not work as expected.
Unit Monitor   NLS cert not found
1
 
NetworkLocationServer NLS cert not found The certificate configured for the network location server cannot be found. DirectAccess clients located in the corporate network might experience connectivity issues.
Unit Monitor   NLS DNS entry invalid
1
 
NetworkLocationServer NLS DNS entry invalid The network location server does not have a valid DNS entry. DirectAccess clients located in the corporate network will not be able to resolve the server name, and internal network connectivity will not work as expected.
Unit Monitor   NLS Reachability
1
 
NetworkLocationServer NLS unreachable The network location server is unavailable or not responding. This might disrupt DirectAccess connectivity, and connectivity \ for DirectAccess clients located inside the corporate network.
Unit Monitor   NLS unkown erros
1
 
NetworkLocationServer NLS unknown error An unknown error occured with Network Location Server
Unit Monitor   NLS URL Availability
1
 
NetworkLocationServer NLS URL unreachable There is no response from the network location server URL. DirectAccess connectivity might not work as expected, and DirectAccess clients located inside the corporate network might not be able to reach internal resources
Unit Monitor   No more licenses monitor
1
 
VPNServer No more licenses monitor A user was unable to connect to the Routing and Remote Access server as the server has exceeded its client license limit.
Unit Monitor   Otp Certificate template configuration
1
 
Otp Certificate template misconfiguration  
Unit Monitor   OTP exemption state
1
 
Otp OTP two factor auth user exempt SG not found The security group defined for users exempt from two-factor authentication does not exist
Unit Monitor   OTP ISAPI extension state
1
 
Otp OTP ISAPI extension stopped The OTP authentication ISAPI extension has stopped, and DirectAccess cannot function as expected.
Unit Monitor   OTP ISAPI extension state
1
 
Otp OTP ISAPI extension misconfigured The OTP authentication ISAPI extension is not configured correctly, and DirectAccess cannot function as expected.
Unit Monitor   OTP signing certificate configuration
1
 
Otp OTP signing certificate misconfigured The OTP signing certificate is missing or configured incorrectly.
Unit Monitor   Otp unknown error
1
 
Otp Otp unknown error  
Unit Monitor   Packet filter related failure
1
 
VPNServer Packet filter related failure The Routing and Remote Access service encountered an error while configuring packet filter.
Unit Monitor   Ports or Protocols Blocked
1
 
IPSec Ports or Protocols blocked Ports or protocols blocked on the internal or external network adapters are preventing Remote Access from functioning as expected.
Unit Monitor   Protocol initialization failure
1
 
VPNServer Protocol initialization failure The Internet Group Management Protocol version 2 (IGMPv2) encountered an error during initialization.
Unit Monitor   RADIUS server availability
1
 
Otp RADIUS server unavailable A connection to a RADIUS server configured for OTP authentication cannot be established.
Unit Monitor   Radius Server Connectivity
1
 
Otp RADIUS server unreachable A connection cannot be established to any of the RADIUS servers from Remote Access server.
Unit Monitor   Rasman port open failure Monitor
1
 
VPNServer Rasman port open failure Monitor The Routing and Remote Access service or The Remote Access Connection Manager service encountered an error while opening a port for remote access.
Unit Monitor   Remote Access Connection Manager Unexpectedly Terminated Monitor
1
 
VPNServer Remote Access Connection Manager Unexpectedly Terminated Monitor The Remote Access Manager (Rasman) service was unexpectedly terminated.
Unit Monitor   Replay Attack Check
1
 
NetworkSecurity Potential Replay Attack A network security component is under a Replay attack. A Replay attack is a form of network attack in which a valid data transmission is maliciously or fraudulently repeated or delayed.
Unit Monitor   Routing and Remote Access Service Monitor
1
 
VPNServer RemoteAccess Service Monitor The Remote Access (RemoteAccess) service is not running.
Unit Monitor   Routing and Remote Access Unexpectedly Terminated Monitor
1
 
VPNServer Routing and Remote Access Unexpectedly Terminated Monitor The Remote Access (RemoteAccess) service was unexpectedly terminated.
Unit Monitor   Server Configuration
1
 
Services Failed to apply server settings Remote Access failed to apply server specific settings.
Unit Monitor   Service availability
1
 
Services Services unavailable Check if the services required for proper functioning of the server are running
Unit Monitor   Services unknown error
1
 
Services Services unknown error An error occured with the services essential to running DA
Unit Monitor   Some Mgmt Servers Unavailable
1
 
ManagementServers Some Mgmt Servers Unreachable One or more management servers are unavailable or not responding. Updates required for corporate compliance of DirectAccess client computers might not work as expected.
Unit Monitor   Spoofing Attack
1
 
NetworkSecurity Potential Spoofing Attack A network security component is under a spoofing attack.
Unit Monitor   SSTP-IPHttps Cert Validation
1
 
IP-HTTPS IPHttps cert different from SSTP cert configured The specified IP-HTTPS certificate is different from the VPN SSTP certificate. IP-HTTPS and SSTP must use the same certificate because both use port 443.
Unit Monitor   Teredo Server - IP Helper Service State
1
 
Teredo Teredo - IP Helper Service State The IP Helper service (iphlpsvc) has stopped. DirectAccess might not function as expected. The IP Helper service provides tunnel connectivity using the connectivity platform, IPv6 transition technologies, and IP-HTTPS.
Unit Monitor   Teredo Server Forwarding
1
 
Teredo Teredo Server Forwarding Diabled Forwarding is disabled on the Teredo server.
Unit Monitor   Teredo Server Initialization Failed
1
 
Teredo Teredo Server Initialization Failed The Teredo server cannot be started.
Unit Monitor   Teredo Server IP address validity
1
 
Teredo Teredo Server IP Address Validity The Teredo server primary or secondary IPv4 addresses are invalid.
Unit Monitor   Teredo Server Stopped
1
 
Teredo Teredo Server Stopped The Teredo server has stopped.
Unit Monitor   Teredo Server Unknown Error
1
 
Teredo Unknown Error Catch all for all other errors with teredo server
Unit Monitor   Unknown Error
1
 
NetworkAdapters Unknown Error This monitor is a catch all for other errors

See Also for Windows Routing and Remote Access Service (RRAS) Management Pack


Downloads for Windows Routing and Remote Access Service (RRAS) Management Pack

AZURE OPTIMIZATION ASSESSMENT GET STARTED
MIGRATION TO AZURE GET STARTED
SYSTEM CENTER MIGRATION TO AZURE GET STARTED
MIGRATION TO AZURE FOR SQL AND WINDOWS 2008 GET STARTED