ADMX Viewer
AddSystemHard.Policies.AddLegacyHard• Machine

MSS: (NoDefaultExempt) Configure IPSec traffic exemptions

Download ADMX

This policy defines which types of network traffic are exempt from IPSec protection, even when an IPSec policy is active. For maximum security, exemptions should be minimized. This setting controls the behavior for IKE and IPsec DoS Protection.

Policy Details

Policy Name
Pol_MSS_NoDefaultExempt
Registry Key
System\CurrentControlSet\Services\IPSEC
Supported On
At least Windows Vista
Available Languages
en-usfr-fr

Configuration Elements

NoDefaultExempt

Type: enum

Allowed Values
  • 0 No IPSec protection (least secure): Exempts all traffic.
  • 1 Exempt multicast, broadcast, and ISAKMP traffic.
  • 2 Exempt RSVP, Kerberos, and ISAKMP traffic.
  • 3 Exempt ISAKMP traffic only (most secure).