This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(112.00000000000001, 75%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESR%3C/text%3E%3C/svg%3E)
HI ,
we have deployed Azure VPN ( Point to site ) for more than 100 users , but more than 10+ users complaining that azure point to site VPN disconnecting frequently . Apps is downloaded from store only .
someone help me this is known issue ? I raised the support ticket but no proper solution.
Hello @Srinath Ravi ,
Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.
I understand that Azure Point to Site VPN keeps disconnecting for few of your users and you would like to know the reason behind this issue.
Could you please share the below details:
Regards,
Gita
Hi
please find the support ticket in private message. Tunnel type is open vpn .
It not show any error it keep disconnecting and connecting back , we have checked different network , location , users and laptop. Few user getting disconnect atleast 10 time a day ..
@Srinath Ravi , thank you for sharing the support request number. Please allow me some time to go through the details in the support request and get back to you.
@Srinath Ravi , I checked the support request and can see that the support team has engaged the backend team for a detailed investigation on this issue. They have reviewed the backend VPN logs and found the disconnect reason as below:
"Disconnect request received <= Remote initiated"
So, the backend team has requested for AzureVpnCxn.log from the disconnected clients to analyze it further.
I also checked for any known issues and found a couple of old issues related to the Azure VPN client version and Intune/Microsoft Endpoint Manager, but both have been mitigated. As of today, I don't see any known issues that could cause the random P2S VPN disconnections.
My suggestion would be to share the requested details and logs with the support team, so that they can provide these logs to the backend team for an in-depth investigation.
Regards,
Gita
Gita, Thanks for the update,. We are struggle between the enduser for last 2 month. Any other option is their for premium kind of ticket opening for this issues?
@Srinath Ravi , the support ticket type is always derived from your support plan.
And the maximum available severity level and time to respond depends on your support plan and the country/region in which you're located, including the timing of business hours in that country/region.
I notice that you currently have a Severity B support case which means Moderate business impact, which implies that customer’s business has moderate loss or degradation of services, but work can reasonably continue in an impaired manner.
Considering that the issue isn't affecting all of your end users, and the disconnections occur randomly, the severity B classification seems appropriate in this scenario.
I understand that you've already invested a considerable amount of time addressing this issue. However, the backend team was only engaged two days ago, so I would recommend waiting for them to complete their analysis of logs and investigation.
Additionally, I can see that the support team has involved both the Azure AD team and the Storage team to validate the Azure AD server configuration and investigate any potential Azure file server IOPS storage issues, per your recommendation.
I will also track the issue from my end and try to push for an escalation, if needed.
Regards,
Gita
@Srinath Ravi , I tracked the support case and found that you've provided the requested logs, which the support team has forwarded to the backend team for thorough analysis. I'll continue to monitor the incident for any new updates.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(217.60000000000002, 67%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERB%3C/text%3E%3C/svg%3E)
Did this thread get resolved at all? We're looking to use Azure VPN Gateways and have a gateway in place, but Windows 11 endpoints are getting disconnected as soon as they complete a connection and so far we are drawing a blank on why. Any lead may prove useful.
Hello @Rob Brown ,
The above issue is still being investigated. The team has already checked the backend VPN gateway logs, and everything seems to be fine, without any issues.
The issue is only with a few clients (intermittent) and the VPN logs are not getting generated/stored correctly due to internal firewall restriction. Hence the team is waiting for the correct logs to continue the investigation.
Such intermittent issues are generally related to internal firewalls or client OS configurations and without the logs, it is difficult to find the root cause.
There was a known issue with Windows April 2024 security update which resulted in VPN connection failures and was fixed in the windows update KB5037771.
Regards,
Gita
Re-posting answer from elsewhere in this thread (the reponses layout really isn't great)
=-=-=-=-=-=-=-=-=-=-=-=-
OK - I've found the issue for us, Packet Filtering was\is not responding to specified Firewall rules properly - specifically relating to StealthMode for all 3 firewall profiles.
If StealthMode is True (Default) packet filtering will block all responses and ignore any custom values in W11 - but NOT W10.
Quite why it's failing to accept values isn't clear to me, but with StealthMode set to False (i.e. disabled) the Stealth filter stops blocking what looks like a single ACK Response packet.
A better understanding of the fault is going to need someone who can interpret Wireshark responses better than I can.
=-=-=-=-=-=-=-=-=-=-=-=-
Ultimately we're not going to progress down this line for a solution and look at alternative vendors - the lack of adequate/competent gateway routing is also a problem - I'm not keen on having to also deploy an NVA to manage DNS on top of any route tables, plus a NAT gateway for outbound.
Not yet Rob,
They keep asking user end log but not fixed anything .same machine fortinet VPN is configured and it is working fine .
We're getting solid connections from Windows 10 endpoints, running all the same ADMX/GPO's as the W11 endpoints - and the gateway config itself has been checked out by a different MS support team with no faults found.
I'm about to set about a line by line review of every control clause we're running, see if anything leaps out. Will post again if I find a fix.
OK - I've found the issue for us, Packet Filtering was\is not responding to specified Firewall rules properly - specifically relating to StealthMode for all 3 firewall profiles.
If StealthMode is True (Default) packet filtering will block all responses and ignore any custom values in W11 - but NOT W10.
Quite why it's failing to accept values isn't clear to me, but with StealthMode set to False (i.e. disabled) the Stealth filter stops blocking what looks like a single ACK Response packet.
A better understanding of the fault is going to need someone who can interpret Wireshark responses better than I can.