The Do not allow connections without IPSec machine setting should be configured correctly. If enabled then only those connections that are configured for IPSec may be established. If disabled then connections that are configured for IPSec or connections not configured for IPSec may be established. Fix: (1) GPO: Computer Configuration\Administrative Templates\System\iSCSI\iSCSI Security\Do not allow connections without IPSec (2) KEY: HKLM\Software\Policies\Microsoft\Windows\iSCSI\RequireIPSec