In post 938 I noted that Microsoft had marked the Always On VPN bug fixed when it wasn’t. It’s actually fixed now.
What changed
The September 2026 Windows 11 security updates broke Always On VPN when profiles used automatic protocol selection with IKEv2 and SSTP. Connections hung on “Connecting” or failed with “The specified port is already in use.” Microsoft says the October preview update KB5127936 fixes it.
If you don’t want a preview update
Microsoft’s mitigation still works: set the profile to a single protocol, SSTP only or IKEv2 only, and wait for November’s Patch Tuesday.
My take
For a network guy, pinning one protocol is the cleaner choice anyway. Fewer fallback paths, fewer surprises.
God Bless, and May the Source Be with You!
