Windows Security Log Event ID 5048

Operating Systems Windows 2008 R2 and 7
Windows 2012 R2 and 8.1
Windows 2016 and 10
Windows Server 2019 and 2022
Category
 • Subcategory		Uncategorized
 • Subcategory could not be determined
Type Success
Corresponding events
in Windows 2003
and before		  

5048: A change has been made to IPsec settings. A Crypto Set was deleted

On this page

This is a normal event generated by Windows Firewall rule processing.  Microsoft says "This is a normal condition. No further action is required.". 

Free Security Log Resources by Randy

Setup PowerShell Audit Log Forwarding in 4 Minutes

 

Examples of 5048

A change has been made to IPsec settings. A Crypto Set was deleted.

Profile Changed: All

Deleted Crypto Set:
  ID: {E5A7D97B-4BCE-4e4d-B07F-4AB1BA7E7tr4}
  Name: -

Top 10 Windows Security Events to Monitor

Free Tool for Windows Event Collection

Stay up-to-date on the Latest in Cybersecurity
Sign up for the Ultimate IT Security newsletter to hear about the latest webinars, patches, CVEs, attacks, and more.
Work Email:

 

Upcoming Webinars
    Additional Resources