6to4 router availability

This is a critical alarm generated because the IP Helper service (iphlpsvc) stopped responding.

BFE service availability

This is a critical alarm generated because the Base Filtering Engine service (BFE) stopped responding.

ConfigMgrCom service availability

This is a critical alarm generated because the Forefront UAG Configuration Manager service (ConfigMgrCom) stopped responding.

Current state entries at critical level

This is a critical alarm generated because the "Current State Entries" counter (under the object "IPSec DOS Protection" in the performance monitor tool) exceeded critical levels.

Current state entries at warning level

This is a warning alarm generated because "Current State Entries" counter (under the object "IPSec DOS Protection" in the performance monitor tool) exceeded warning levels.

DirectAccess activation state

This is a critical alarm generated because the DirectAccess activation process failed.

Discarded ICMPv6 packets per second

This is a warning alarm generated because the "Inbound Rate Limit Discarded ICMPv6 Packets/sec" counter (under the object "IPSec DOS Protection" in the performance monitor tool) exceeded a defined threshold.

Discarded IPv6 IPsec authenticated packets per second

This is a warning alarm generated because the "Inbound Rate Limit Discarded IPv6 IPsec Authenticated Packets/sec" counter (under the object "IPSec DOS Protection" in the performance monitor tool) exceeded a defined threshold.

Discarded IPv6 IPsec unauthenticated packets per second

This is a warning alarm generated because the "Inbound Rate Limit Discarded IPv6 IPsec Unauthenticated Packets/sec" counter (under the object "IPSec DOS Protection" in the performance monitor tool) exceeded a defined threshold.

DNS64 average query processing time

This is a warning alarm generated because the "Total Query Average Processing Time" counter (under the object "Forefront UAG DNS64" in the performance monitor tool) exceeded a defined threshold.

DNS64 DnsAlgSrv service availability

This is a critical alarm generated because the Forefront UAG DNS64 (DnsAlgSrv) service stopped responding.

DNS64 total dropped queries

This is a warning alarm generated because the "Total Query Dropped" counter (under the object "Forefront UAG DNS64" in the performance monitor tool) exceeded a defined threshold

DNS64 total dropped queries per second

This is a warning alarm generated because the "Total Query Dropped/sec" counter (under the object "Forefront UAG DNS64" in the performance monitor tool) exceeded a defined threshold.

DNS64 WatchDogSrv service availability

This is a critical alarm generated because the Forefront UAG Watch Dog service (WatchDogSrv) stopped responding.

Failed Main Mode negotiations at critical level

This is a critical alarm generated because the "Failed Main Mode Negotiations" counter (under the object "IPsec AuthIP IPv6" in the performance monitor tool) exceeded critical levels.

Failed Main Mode negotiations at warning level

This is a warning alarm generated because "Failed Main Mode Negotiations" counter (under the object "IPsec AuthIP IPv6" in the performance monitor tool) exceeded warning levels.

Failed replay detection packets per second

This is a warning alarm generated because the "Packets That Failed Replay Detection/sec" counter (under the object "IPsec Driver" in the performance monitor tool) exceeded a defined threshold.

Forefront UAG built-in application service availability

This is a critical alarm generated because a Forefront UAG built-in application service stopped responding.

Forefront UAG configuration module availability

This is a critical alarm generated because the Forefront UAG configuration module reported an error.

Forefront UAG repository availability

This monitor represents a Forefront UAG repository. The repository is not monitored.

IKE DoS-prevention mode started

This is a warning alarm for potential DoS attack and is raised when "IKE DoS-prevention mode started" event (Event Id: 4646, Event Source: Microsoft Windows security auditing, Event Log Channel: Security) is generated.

IKEEXT service availability

This is a critical alarm generated because the IKE and AuthIP IPsec Keying Modules service (IKEEXT) stopped responding.

Incorrect SPI packets per second

This is a warning alarm generated because the "Incorrect SPI Packets/sec" counter (under the object "IPsec Driver" in the performance monitor tool) exceeded a defined threshold.

IP-HTTPS gateway availability

This is a critical alarm generated because the IP Helper service (iphlpsvc) stopped responding.

ISATAP router availability

This is a critical alarm generated because the IP Helper service (iphlpsvc) stopped responding.

MonitorMgrCom service availability

This is a critical alarm generated because the Forefront UAG Monitoring Manager service (MonitorMgrCom) stopped responding.

NLB Helper driver availability

This is a critical alarm generated because the NLB Helper driver (DAEng) stopped responding. This alarm is cleared when the driver is running again.

SessionMgrCom service availability

This is a critical alarm generated because the Forefront UAG Session Manager service (SessionMgrCom) stopped responding.

Sticky connections exist

This is a warning alarm generated because there were no Network Load Balancing sticky connections on the current node

Teredo packet receive rate

This is a warning alarm generated because there was no change in packet amount in the "In - Teredo Server Total Packets: Success + Error" counter (under the object "Teredo Server" in the performance monitor tool), meaning there was no Teredo traffic.

Teredo relay availability

This is a critical alarm generated because the IP Helper service (iphlpsvc) stopped responding.

Teredo server availability

This is a critical alarm generated because the IP Helper service (iphlpsvc) stopped responding.

User Kerberos Main Mode SAs exist

This is a warning alarm generated because there were no established Main Mode security associations that have user Kerberos authentication.

UserMgrCom service availability

This is a critical alarm generated because the Forefront UAG User Manager service (UserMgrCom) stopped responding.