Microsoft 2026-yil sentyabr oyidagi Windows 11 xavfsizlik yangilanishlarini o'rnatgandan so'ng yuzaga kelgan Always On VPN ulanish xatoliklarini bartaraf etdi.
Always On VPN masofaviy kirish yechimi fon rejimida ishlaydi va foydalanuvchilarning qurilmalari Internetga ulanganida korporativ tarmoqqa xavfsiz tunnel o'rnatadi. U eski DirectAccess texnologiyasini almashtirgan va Windows 10, Windows 11 hamda Windows Server ishlaydigan domen a'zolari, domen a'zosi bo'lmagan va Microsoft Entra ID a'zolari bo'lgan qurilmalarni qo'llab-quvvatlaydi.
Microsoft avval bu ma'lum muammoni 2026-yil oktyabr oyidagi Windows 11 jamlangan yangilanishlarida tuzatilgan deb noto'g'ri belgilagan edi.
Kompaniya bu muammoni birinchi marta sentyabr oxirida IT ma'murlariga yuborilgan xizmat ogohlantirishida tan olgan va Always On VPN xatoliklari IKEv2 va SSTP bilan avtomatik protokol tanlash ishlatilganda 2026-yil sentyabr xavfsizlik yangilanishlari tufayli Windows 11 tizimlarida yuzaga kelganini aytgan.
Chorshanba kuni Microsoft bu muammo ushbu oydagi KB5127936 oldindan ko'rish yangilanishini o'rnatgan foydalanuvchilar uchun nihoyat tuzatilganini tasdiqladi.
"Bu yangilanish sentyabr xavfsizlik yangilanishini o'rnatgandan so'ng Always On VPN ulanishlariga ta'sir qiladigan muammoni tuzatadi", — deb aytdi u. "Avtomatik protokol tanlash yoki protokol zaxirasi sozlangan bo'lsa, ta'sirlangan VPN ulanishlari Ulanish holatida qolib ketishi yoki dastlabki ulanish urinishidan so'ng muvaffaqiyatsiz bo'lishi mumkin edi. Ba'zi hollarda keyingi ulanish urinishlari 'Ko'rsatilgan port allaqachon ishlatilmoqda' xatosini ko'rsatishi mumkin edi."
Vaqtinchalik yechim ham mavjud
Microsoft oldindan ko'rish yangilanishini o'rnatishni istamaydigan va keyingi oy Patch Tuesday jamlangan yangilanishlarini kutishni afzal ko'radigan foydalanuvchilar uchun vaqtinchalik tuzatishni ham taqdim etadi.
Bu ma'murlardan ta'sirlangan qurilmalarda Always On VPN xatoliklarining oldini olish uchun ikkita tunnel protokolidan birini tanlashni talab qiladi.
"IT ma'murlari Always On VPN profilini avtomatik protokol tanlashdan yagona protokolga — o'z muhit va sozlamalariga qarab SSTP faqat yoki IKEv2 faqat — o'zgartirish orqali bu muammoni yumshatishi mumkin", — deb aytdi Microsoft.
"Tashkilotlar o'z muhitlari, xavfsizlik va joylashtirish talablariga asoslanib protokolni tanlashlari kerak."
2026-yil oktyabr oyidagi oldindan ko'rish yangilanishi, shuningdek, 2026-yil sentyabr oyidagi Windows 11 xavfsizlikdan tashqari oldindan ko'rish yangilanishini (yoki o'shandan beri chiqarilgan Windows yangilanishlarini) o'rnatgandan so'ng "Administrator himoyasi" xavfsizlik xususiyati yoqilganda, administrator bo'lmagan foydalanuvchilarning qurilmalarga Masofaviy ish stoli orqali ulanishini to'sadigan ma'lum muammoni ham tuzatadi.
Hujumchilar haqiqiy ma'lumotlarga ega bo'lgach, ularning harakatlarining faqat 37 foizi bloklanadi
Umumiy oldini olish ko'rsatkichlari dastlabki kirishdan keyin nima sodir bo'lishini yashirishi mumkin. Hujumchilar haqiqiy ma'lumotlardan foydalanayotganda, oldini olish keskin pasayadi.
Blue Report 2026 mijozlar ishlab chiqarish muhitlarida o'tkazilgan 338 million simulyatsiya bo'yicha mudofaa texnikasini texnika bo'yicha o'lchaydi.
Hisobotni oling
Microsoft has resolved Always On VPN connection failures triggered after installing the September 2026 Windows 11 security updates.
The Always On VPN remote access solution runs in the background and establishes secure tunnels back to the user's corporate network when their devices connect to the Internet. It has replaced the legacy DirectAccess technology and supports domain-joined, non-domain-joined, and Microsoft Entra ID–joined devices running Windows 10, Windows 11, and Windows Server.
Microsoft has previously mistakenly flagged this known issue as fixed in the October 2026 Windows 11 cumulative updates.
The company first acknowledged it in a service alert sent to IT administrators in late September, saying the Always On VPN failures were triggered on Windows 11 systems by the September 2026 security updates when using automatic protocol selection with IKEv2 and SSTP.
On Wednesday, Microsoft confirmed that this issue has finally been fixed for users who installed this month's KB5127936 preview update.
"This update fixes an issue that affects Always On VPN connections after installing September security update," it said."When automatic protocol selection or protocol fallback was configured, affected VPN connections could remain stuck in a Connecting state or fail to connect after an initial connection attempt failed. In some cases, subsequent connection attempts could display the error, 'The specified port is already in use.'"
Workaround also available
Microsoft also provides a temporary fix for users who don't want to install the preview update and would rather wait for next month's Patch Tuesday cumulative updates.
This requires admins to choose one of two tunneling protocols to prevent Always On VPN failures on affected devices.
"IT administrators can mitigate this issue by changing the Always On VPN profile from automatic protocol selection to a single protocol, either SSTP only or IKEv2 only, depending on their environment and configuration," Microsoft said.
"Organizations should select the protocol based on their environment, security, and deployment requirements."
The October 2026 preview update also fixes a known issue preventing non-admin users from connecting to devices via Remote Desktop when the "Administrator protection" security feature is enabled after installing the September 2026 Windows 11 non-security preview update (or Windows updates released since then).
Once attackers have valid credentials, only 37% of their actions are blocked
Overall prevention scores can hide what happens after initial access. Once attackers are using valid credentials, prevention drops sharply.
The Blue Report 2026 measures defenses technique by technique across 338 million simulations run in customer production environments.
Get the report