What was the Always On VPN issue and why does the fix matter?
Always On VPN in Windows 10, 11, and Server editions automatically connects your VPN whenever an internet connection is detected, ensuring continuous network security. A bug introduced in a recent update caused these VPN connections to fail if the device couldn’t establish an initial internet link, showing errors like “The specified port is already in use.” This left some devices vulnerable by failing to activate VPN protection as expected, a significant concern for enterprises relying on automated VPN connections to maintain secure communications.
The fix delivered in cumulative updates KB5127646 and KB5127648 addresses this failure mode, restoring reliable VPN connectivity and reducing the risk of unprotected data exposure when devices are connected to networks.
How does the VPN fix impact other VPN services and user experience?
Beyond the patch solving the Always On VPN problem, some users have noticed improved performance and stability with third-party VPN providers, such as Surfshark. For example, some reported faster and more stable VPN sessions, especially when resuming their PCs from sleep mode. This suggests the update might contain broader networking improvements, though these effects seem incidental rather than explicitly targeted by the fix.
What new issues have emerged after applying the Windows update?
While the VPN problem is resolved, some users have experienced fresh connectivity troubles, particularly related to corporate WiFi networks that use WPA2-Enterprise authentication methods like 802.1X PEAP and NTLMv1 protocols. Reports indicate Windows 11 clients can initiate authentication but fail to complete it, preventing connection to WiFi on various hardware platforms. This issue impacts enterprise and organizational environments where secure WiFi access is critical and may disrupt workflows until addressed.
Currently, these new issues are being investigated, and temporary workarounds or fixes may be needed until an official patch arrives.
What should Windows users and IT administrators do now?
For users experiencing Always On VPN failures, installing the latest cumulative updates KB5127646 and KB5127648 is the recommended course to regain reliable VPN connectivity. Those who cannot immediately apply these patches can mitigate the issue by configuring their VPN profile to use a single protocol (SSTP or IKEv2), instead of automatic protocol selection.
However, organizations relying on WPA2-Enterprise WiFi and affected by authentication failures should cautiously evaluate applying the update until a resolution is confirmed. IT administrators should monitor official communications and consider testing updates in controlled environments before wide deployment.
Overall, this situation underscores the balancing act between patching critical security flaws and maintaining existing network stability. Continuous vigilance and timely application of fixes—while allowing for thorough testing—remain essential for secure and robust Windows networking environments.