Microsoft has resolved a known issue that caused Always On VPN connection failures after the September 2026 Windows 11 security updates. The company acknowledged the problem in a late September service alert to IT administrators, noting that the bug triggered failures when the initial connection failed, such as when using automatic protocol selection with IKEv2 and SSTP on systems running Windows 11 24H2 and later.
"When automatic protocol selection or protocol fallback was configured, affected VPN connections could remain stuck in a Connecting state or fail to connect after an initial connection attempt failed," Microsoft said in a support document. "In some cases, subsequent connection attempts could display the error, 'The specified port is already in use.'"
The Always On VPN remote access solution replaces legacy DirectAccess technology and works with domain-joined, non-domain-joined, and Microsoft Entra ID–joined Windows 10, Windows 11, and Windows Server devices. It runs in the background, automatically establishing a secure tunnel to corporate networks whenever a device connects to the internet.
For customers unable to install the October updates immediately, Microsoft has provided a temporary workaround: IT administrators can change the Always On VPN profile from automatic protocol selection to a single protocol—either SSTP only or IKEv2 only—depending on their environment and configuration.
The September updates also triggered other issues, prompting Microsoft to release emergency fixes for Remote Desktop Services failures, Hyper-V issues, and USB audio problems affecting both home and enterprise Windows users.