Microsoft-Windows Networking VPN Plugin Platform

32 events across 2 channels

Event ID	Title	Channel
2001	Vpn Connection Error = %3, Profile name = %2, Plugin SID = %1.	Operational
2002	Vpn Plugin Background Task Execution Started	OperationalVerbose
2003	Vpn Plugin Background Task Execution Exit	OperationalVerbose
2004	Message from VPN App: [.	OperationalVerbose
2005	Autotrigger [.	Operational
2006	Autotrigger [.	Operational
2007	Autotrigger: [.	Operational
2008	Autotrigger: [.	Operational
2009	Autotrigger: [.	Operational
2010	Autotrigger: [.	Operational
2011	Autotrigger: [.	Operational
2012	Autotrigger: [.	Operational
2013	Autotrigger: [.	Operational
2014	Autotrigger: [.	Operational
2015	Autotrigger: [.	Operational
2016	Autotrigger: [.	Operational
2017	Autotrigger: [.	Operational
2018	Autotrigger: [.	Operational
2019	Vpn State Machine Status : Invalid, Profile name = %2, Plugin SID = %1.	Operational
2020	Vpn State Machine Status : Connecting, Profile name = %2, Plugin SID = %1.	Operational
2021	Vpn State Machine Status : Connected, Profile name = %2, Plugin SID = %1.	Operational
2022	Vpn State Machine Status : Disconnecting, Profile name = %2, Plugin SID = %1.	Operational
2023	Vpn State Machine Status : Disconnected, Profile name = %2, Plugin SID = %1.	Operational
2024	Vpn State Machine Status : Abort, Profile name = %2, Plugin SID = %1.	Operational
2025	Vpn State Machine Status : Negotiating Network, Profile name = %2, Plugin SID = …	Operational
2026	Vpn State Machine Status : Requesting Credentials, Profile name = %2, Plugin SID …	Operational
2027	Vpn State Machine Status : Requesting Credentials using Custom UI, Profile name …	Operational
2028	Keep Alive event invoked, Profile name = %1.	Operational
2029	Autotrigger: DNS query %1 is made, matching VPN trigger rules.	Operational
2030	Autotrigger: [.	Operational
2031	Autotrigger: auto trigger module initialization completed with Error = %1.	Operational
2032	Autotrigger: auto trigger Config registry content completed with Error = %1.	Operational

Event ID 2001 — Vpn Connection Error = %3, Profile name = %2, Plugin SID = %1.

Provider: Microsoft-Windows Networking VPN Plugin Platform
Channel: Operational

Message

Vpn Connection Error = %3, Profile name = %2, Plugin SID = %1

Fields

Name	Description
`Plugin`	—
`Profile`	—
`Error`	—

Event ID 2002 — Vpn Plugin Background Task Execution Started

Provider: Microsoft-Windows Networking VPN Plugin Platform
Channel: OperationalVerbose

Message

Vpn Plugin Background Task Execution Started

Fields

Name	Description
`Plugin`	—
`InitialProfile`	—
`InitialEventType`	—

Event ID 2003 — Vpn Plugin Background Task Execution Exit

Provider: Microsoft-Windows Networking VPN Plugin Platform
Channel: OperationalVerbose

Message

Vpn Plugin Background Task Execution Exit

Fields

Name	Description
`Plugin`	—
`InitialProfile`	—
`InitialEventType`	—
`NumPacketsSent`	—
`NumPacketsReceived`	—
`LastError`	—

Event ID 2004 — Message from VPN App: [.

Provider: Microsoft-Windows Networking VPN Plugin Platform
Channel: OperationalVerbose

Message

Message from VPN App: [%1] %2

Fields

Name	Description
`Profile`	—
`Message`	—

Event ID 2005 — Autotrigger [.

Provider: Microsoft-Windows Networking VPN Plugin Platform
Channel: Operational

Message

Autotrigger [%1], device is inside the trusted network boundary [%2]

Fields

Name	Description
`profileName`	—
`NetworkName`	—

Event ID 2006 — Autotrigger [.

Provider: Microsoft-Windows Networking VPN Plugin Platform
Channel: Operational

Message

Autotrigger [%1], device is outside the trusted network boundary

Fields

Name	Description
`string`	—

Event ID 2007 — Autotrigger: [.

Provider: Microsoft-Windows Networking VPN Plugin Platform
Channel: Operational

Message

Autotrigger: [%1], device is attempting to connect to VPN. Please refer to Microsoft-Windows-VPN channel under WFP for cause of connect

Fields

Name	Description
`string`	—

References

Microsoft Learn https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/troubleshoot-microsoft-defender-antivirus

Event ID 2008 — Autotrigger: [.

Provider: Microsoft-Windows Networking VPN Plugin Platform
Channel: Operational

Message

Autotrigger: [%1], device failed to connect to VPN

Fields

Name	Description
`string`	—

Event ID 2009 — Autotrigger: [.

Provider: Microsoft-Windows Networking VPN Plugin Platform
Channel: Operational

Message

Autotrigger: [%1], device is connected to VPN

Fields

Name	Description
`string`	—

Event ID 2010 — Autotrigger: [.

Provider: Microsoft-Windows Networking VPN Plugin Platform
Channel: Operational

Message

Autotrigger: [%1], device got disconnected from VPN, Redial it

Fields

Name	Description
`string`	—

Event ID 2011 — Autotrigger: [.

Provider: Microsoft-Windows Networking VPN Plugin Platform
Channel: Operational

Message

Autotrigger: [%1], profile got activated

Fields

Name	Description
`string`	—

References

Microsoft Learn https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/troubleshoot-microsoft-defender-antivirus

Event ID 2012 — Autotrigger: [.

Provider: Microsoft-Windows Networking VPN Plugin Platform
Channel: Operational

Message

Autotrigger: [%1], profile got deactivated

Fields

Name	Description
`string`	—

References

Microsoft Learn https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/troubleshoot-microsoft-defender-antivirus

Event ID 2013 — Autotrigger: [.

Provider: Microsoft-Windows Networking VPN Plugin Platform
Channel: Operational

Message

Autotrigger: [%1], profile got auto disconnected. Please refer to Microsoft-Windows-VPN channel under WFP for cause of disconnect

Fields

Name	Description
`string`	—

References

Microsoft Learn https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/troubleshoot-microsoft-defender-antivirus

Event ID 2014 — Autotrigger: [.

Provider: Microsoft-Windows Networking VPN Plugin Platform
Channel: Operational

Message

Autotrigger: [%1], profile got disconnected as device going to sleep state

Fields

Name	Description
`string`	—

Event ID 2015 — Autotrigger: [.

Provider: Microsoft-Windows Networking VPN Plugin Platform
Channel: Operational

Message

Autotrigger: [%1], device is resumed, Redialling it

Fields

Name	Description
`string`	—

Event ID 2016 — Autotrigger: [.

Provider: Microsoft-Windows Networking VPN Plugin Platform
Channel: Operational

Message

Autotrigger: [%1], profile added

Fields

Name	Description
`string`	—

Event ID 2017 — Autotrigger: [.

Provider: Microsoft-Windows Networking VPN Plugin Platform
Channel: Operational

Message

Autotrigger: [%1], profile deleted

Fields

Name	Description
`string`	—

Event ID 2018 — Autotrigger: [.

Provider: Microsoft-Windows Networking VPN Plugin Platform
Channel: Operational

Message

Autotrigger: [%1], profile modified

Fields

Name	Description
`string`	—

Event ID 2019 — Vpn State Machine Status : Invalid, Profile name = %2, Plugin SID = %1.

Provider: Microsoft-Windows Networking VPN Plugin Platform
Channel: Operational

Message

Vpn State Machine Status : Invalid, Profile name = %2, Plugin SID = %1

Fields

Name	Description
`plugin`	—
`profile`	—

Event ID 2020 — Vpn State Machine Status : Connecting, Profile name = %2, Plugin SID = %1.

Provider: Microsoft-Windows Networking VPN Plugin Platform
Channel: Operational

Message

Vpn State Machine Status : Connecting, Profile name = %2, Plugin SID = %1

Fields

Name	Description
`plugin`	—
`profile`	—

Event ID 2021 — Vpn State Machine Status : Connected, Profile name = %2, Plugin SID = %1.

Provider: Microsoft-Windows Networking VPN Plugin Platform
Channel: Operational

Message

Vpn State Machine Status : Connected, Profile name = %2, Plugin SID = %1

Fields

Name	Description
`plugin`	—
`profile`	—

Event ID 2022 — Vpn State Machine Status : Disconnecting, Profile name = %2, Plugin SID = %1.

Provider: Microsoft-Windows Networking VPN Plugin Platform
Channel: Operational

Message

Vpn State Machine Status : Disconnecting, Profile name = %2, Plugin SID = %1

Fields

Name	Description
`plugin`	—
`profile`	—

Event ID 2023 — Vpn State Machine Status : Disconnected, Profile name = %2, Plugin SID = %1.

Provider: Microsoft-Windows Networking VPN Plugin Platform
Channel: Operational

Message

Vpn State Machine Status : Disconnected, Profile name = %2, Plugin SID = %1

Fields

Name	Description
`plugin`	—
`profile`	—

Event ID 2024 — Vpn State Machine Status : Abort, Profile name = %2, Plugin SID = %1.

Provider: Microsoft-Windows Networking VPN Plugin Platform
Channel: Operational

Message

Vpn State Machine Status : Abort, Profile name = %2, Plugin SID = %1

Fields

Name	Description
`plugin`	—
`profile`	—

Event ID 2025 — Vpn State Machine Status : Negotiating Network, Profile name = %2, Plugin SID = %1.

Provider: Microsoft-Windows Networking VPN Plugin Platform
Channel: Operational

Message

Vpn State Machine Status : Negotiating Network, Profile name = %2, Plugin SID = %1

Fields

Name	Description
`plugin`	—
`profile`	—

Event ID 2026 — Vpn State Machine Status : Requesting Credentials, Profile name = %2, Plugin SID = %1.

Provider: Microsoft-Windows Networking VPN Plugin Platform
Channel: Operational

Message

Vpn State Machine Status : Requesting Credentials, Profile name = %2, Plugin SID = %1

Fields

Name	Description
`plugin`	—
`profile`	—

Event ID 2027 — Vpn State Machine Status : Requesting Credentials using Custom UI, Profile name = %2, Plugin SID = %1.

Provider: Microsoft-Windows Networking VPN Plugin Platform
Channel: Operational

Message

Vpn State Machine Status : Requesting Credentials using Custom UI, Profile name = %2, Plugin SID = %1

Fields

Name	Description
`plugin`	—
`profile`	—

Event ID 2028 — Keep Alive event invoked, Profile name = %1.

Provider: Microsoft-Windows Networking VPN Plugin Platform
Channel: Operational

Message

Keep Alive event invoked, Profile name = %1

Fields

Name	Description
`string`	—

Event ID 2029 — Autotrigger: DNS query %1 is made, matching VPN trigger rules.

Provider: Microsoft-Windows Networking VPN Plugin Platform
Channel: Operational

Message

Autotrigger: DNS query %1 is made, matching VPN trigger rules

Fields

Name	Description
`string`	—

Event ID 2030 — Autotrigger: [.

Provider: Microsoft-Windows Networking VPN Plugin Platform
Channel: Operational

Message

Autotrigger: [%1] Unable to determine internet connectivity, vpn trigger failed

Fields

Name	Description
`string`	—

Event ID 2031 — Autotrigger: auto trigger module initialization completed with Error = %1.

Provider: Microsoft-Windows Networking VPN Plugin Platform
Channel: Operational

Message

Autotrigger: auto trigger module initialization completed with Error = %1

Fields

Name	Description
`Error`	—

Event ID 2032 — Autotrigger: auto trigger Config registry content completed with Error = %1.

Provider: Microsoft-Windows Networking VPN Plugin Platform
Channel: Operational

Message

Autotrigger: auto trigger Config registry content completed with Error = %1

Fields

Name	Description
`Error`	—