Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. High CPU load on a Windows Server 2012 R2-based server because NAT keep-alive timer isn't cleaned up

High CPU load on a Windows Server 2012 R2-based server because NAT keep-alive timer isn't cleaned up

View products that this article applies to.

This article describes an issue in which high CPU load occurs on a Windows Server 2012 R2-based server. Before you install this update, see the Prerequisites section.

↑ Back to the top

Symptoms

Assume that a VPN client is connecting to a Routing and Remote Access service (RRAS) server that is behind a network address translation (NAT). When the VPN client loses connection accidentally and then reconnects, the VPN client gets a new IP address, and the previous connection disappears from the network without a complete VPN disconnection. In this situation, NAT keep-alive timer still sends previous keep-alive messages every 20 seconds to keep the NAT mappings active, and the CPU usage of the server becomes high. 

↑ Back to the top

Cause

This issue occurs because NAT keep-alive timer isn't cleaned up when the VPN client gets a new IP address.

↑ Back to the top

How to get this update

Important If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

Method 1: Windows Update

This update is provided as a Recommended update on Windows Update. For more information about how to run Windows Update, see How to get an update through Windows Update.

Method 2: Microsoft Download Center

The following files are available for download from the Microsoft Download Center:

Operating systemUpdate
All supported x86-based versions of Windows 8.1Download Download the package now.
All supported x64-based versions of Windows 8.1 Download Download the package now.
All supported x64-based versions of Windows Server 2012 R2Download Download the package now.
Note The update for Windows RT 8.1 can be got only from Windows Update.

For more information about how to download Microsoft support files, select the following article number to view the article in the Microsoft Knowledge Base:
119591 How to obtain Microsoft support files from online services
Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

↑ Back to the top

Update detail information

Prerequisites

To install this update, you should first install April 2014, update rollup for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 (2919355) in Windows 8.1 or Windows Server 2012 R2.

Registry information

To apply this update, you don't have to make any changes to the registry.

Restart requirement

You may have to restart the computer after you apply this update.

Update replacement information

This update doesn't replace a previously released update.

↑ Back to the top

Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

↑ Back to the top

References

Learn about the terminology that Microsoft uses to describe software updates.

↑ Back to the top

File Information

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables.
Windows 8.1, Windows RT 8.1 and Windows Server 2012 R2
Notes
  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    VersionProductMilestoneService branch
    6.3.960 0.17 xxxWindows RT 8.1, Windows 8.1, and Windows Server 2012 R2RTMGDR
    6.3.960 0.18 xxxWindows RT 8.1, Windows 8.1, and Windows Server 2012 R2RTMGDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
  • The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed in the "Additional file information" section. MUM, MANIFEST, and the associated security catalog (.cat) files, are very important to maintain the state of the updated components. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.
Windows RT 8.1
File nameFile versionFile sizeDateTimePlatform
Bfe.dll6.3.9600.18229528,89605-Feb-201615:12Not applicable
Fwpuclnt.dll6.3.9600.18229246,78405-Feb-201615:11Not applicable
Ikeext.dll6.3.9600.18229634,88005-Feb-201615:03Not applicable
Nshwfp.dll6.3.9600.18228559,61604-Feb-201616:06Not applicable
Bfe.dll6.3.9600.18229528,89605-Feb-201615:12Not applicable
Fwpuclnt.dll6.3.9600.18229246,78405-Feb-201615:11Not applicable
Ikeext.dll6.3.9600.18229634,88005-Feb-201615:03Not applicable
Networksecurity-ppdlic.xrm-msNot applicable3,05905-Feb-201615:30Not applicable
Nshwfp.dll6.3.9600.18228559,61604-Feb-201616:06Not applicable
Wfplwfs.sys6.3.9600.1748570,98410-Nov-201417:52Not applicable
x86 Windows 8.1
File nameFile versionFile sizeDateTimePlatform
Bfe.dll6.3.9600.18229570,36805-Feb-201615:08x86
Fwpuclnt.dll6.3.9600.18229272,38405-Feb-201615:07x86
Ikeext.dll6.3.9600.18229734,20805-Feb-201614:56x86
Nshwfp.dll6.3.9600.18228561,66404-Feb-201616:22x86
Bfe.dll6.3.9600.18229570,36805-Feb-201615:08x86
Fwpuclnt.dll6.3.9600.18229272,38405-Feb-201615:07x86
Ikeext.dll6.3.9600.18229734,20805-Feb-201614:56x86
Networksecurity-ppdlic.xrm-msNot applicable3,05905-Feb-201615:36Not applicable
Nshwfp.dll6.3.9600.18228561,66404-Feb-201616:22x86
Wfplwfs.sys6.3.9600.1748569,44010-Nov-201417:47x86
x64 Windows 8.1 and Windows Server 2012 R2
File nameFile versionFile sizeDateTimePlatform
Bfe.dll6.3.9600.18229845,31205-Feb-201615:11x64
Fwpuclnt.dll6.3.9600.18229422,40005-Feb-201615:11x64
Ikeext.dll6.3.9600.182291,083,90405-Feb-201615:02x64
Nshwfp.dll6.3.9600.18228713,21604-Feb-201616:23x64
Bfe.dll6.3.9600.18229845,31205-Feb-201615:11x64
Fwpuclnt.dll6.3.9600.18229422,40005-Feb-201615:11x64
Ikeext.dll6.3.9600.182291,083,90405-Feb-201615:02x64
Networksecurity-ppdlic.xrm-msNot applicable3,05905-Feb-201615:35Not applicable
Nshwfp.dll6.3.9600.18228713,21604-Feb-201616:23x64
Wfplwfs.sys6.3.9600.17485136,51210-Nov-201418:06x64
Fwpuclnt.dll6.3.9600.18229272,38405-Feb-201615:07x86
Nshwfp.dll6.3.9600.18228561,66404-Feb-201616:22x86
Additional file information
Windows RT 8.1
File propertyValue
File nameArm_06030ba2094d4e3880a809f332c110a4_31bf3856ad364e35_6.3.9600.18229_none_cf918f48efc94872.manifest
File versionNot applicable
File size704
Date (UTC)05-Feb-2016
Time (UTC)19:37
PlatformNot applicable
File nameArm_86b6f78703f673e99e8a1a16587234e6_31bf3856ad364e35_6.3.9600.18229_none_1104b4996f9afa1e.manifest
File versionNot applicable
File size710
Date (UTC)05-Feb-2016
Time (UTC)19:37
PlatformNot applicable
File nameArm_microsoft-windows-network-security-winpe_31bf3856ad364e35_6.3.9600.18229_none_7af10a1732415957.manifest
File versionNot applicable
File size97,109
Date (UTC)05-Feb-2016
Time (UTC)15:30
PlatformNot applicable
File nameArm_microsoft-windows-network-security_31bf3856ad364e35_6.3.9600.18229_none_620c584c45ec9935.manifest
File versionNot applicable
File size95,227
Date (UTC)05-Feb-2016
Time (UTC)19:37
PlatformNot applicable
File nameUpdate.mum
File versionNot applicable
File size2,002
Date (UTC)05-Feb-2016
Time (UTC)19:37
PlatformNot applicable
x86 Windows 8.1
File propertyValue
File nameUpdate.mum
File versionNot applicable
File size2,002
Date (UTC)05-Feb-2016
Time (UTC)19:37
PlatformNot applicable
File nameX86_05633a17c10908bc1d92276696558784_31bf3856ad364e35_6.3.9600.18229_none_22e144ca87b9b404.manifest
File versionNot applicable
File size710
Date (UTC)05-Feb-2016
Time (UTC)19:37
PlatformNot applicable
File nameX86_7cece3262d30559db773f93e7efe07fb_31bf3856ad364e35_6.3.9600.18229_none_a67578fdee85fd17.manifest
File versionNot applicable
File size704
Date (UTC)05-Feb-2016
Time (UTC)19:37
PlatformNot applicable
File nameX86_microsoft-windows-network-security-winpe_31bf3856ad364e35_6.3.9600.18229_none_7aee97bf32443a91.manifest
File versionNot applicable
File size97,109
Date (UTC)05-Feb-2016
Time (UTC)15:39
PlatformNot applicable
File nameX86_microsoft-windows-network-security_31bf3856ad364e35_6.3.9600.18229_none_6209e5f445ef7a6f.manifest
File versionNot applicable
File size95,167
Date (UTC)05-Feb-2016
Time (UTC)19:41
PlatformNot applicable
x64 Windows 8.1 and Windows Server 2012 R2
File propertyValue
File nameAmd64_4e238511c3fda86827a8b0d2c94901c2_31bf3856ad364e35_6.3.9600.18229_none_4d5a12ffd037b632.manifest
File versionNot applicable
File size714
Date (UTC)05-Feb-2016
Time (UTC)19:37
PlatformNot applicable
File nameAmd64_6bebd9bb69fd64b3d8da6e7ef84d7396_31bf3856ad364e35_6.3.9600.18229_none_7ad2a663ecfd8974.manifest
File versionNot applicable
File size708
Date (UTC)05-Feb-2016
Time (UTC)19:37
PlatformNot applicable
File nameAmd64_d8df0b7c5569dbe8811ceba64f11ce58_31bf3856ad364e35_6.3.9600.18229_none_c7f228ab6e26b9bf.manifest
File versionNot applicable
File size708
Date (UTC)05-Feb-2016
Time (UTC)19:37
PlatformNot applicable
File nameAmd64_microsoft-windows-network-security-winpe_31bf3856ad364e35_6.3.9600.18229_none_d70d3342eaa1abc7.manifest
File versionNot applicable
File size97,115
Date (UTC)05-Feb-2016
Time (UTC)15:48
PlatformNot applicable
File nameAmd64_microsoft-windows-network-security_31bf3856ad364e35_6.3.9600.18229_none_be288177fe4ceba5.manifest
File versionNot applicable
File size95,173
Date (UTC)05-Feb-2016
Time (UTC)19:44
PlatformNot applicable
File nameUpdate.mum
File versionNot applicable
File size2,927
Date (UTC)05-Feb-2016
Time (UTC)19:37
PlatformNot applicable
File nameWow64_microsoft-windows-network-security_31bf3856ad364e35_6.3.9600.18229_none_c87d2bca32adada0.manifest
File versionNot applicable
File size19,282
Date (UTC)05-Feb-2016
Time (UTC)15:39
PlatformNot applicable

↑ Back to the top

Keywords: kbsurveynew, kbfix, atdownload, kbexpertiseadvanced, kb

↑ Back to the top

Article Info
Article ID : 3139165
Revision : 2
Created on : 4/9/2020
Published on : 4/9/2020
Exists online : False
Views : 299