Heartbeat denied on IPSec connections

Glad to hear its work with the rule enabled!

That said I'd recommend checking the Firewall authentication logs as well for "Failed" authentications,  we started seeing hundreds of  Authentication Failures once the Heartbeat updated to v1.15.781.0 and your logs are looking very similar to our clients. 

As far as we can tell the heartbeat isn't including the domain name when it submits it pulls the login status
and is the cause of the alerts but I'm curious to see if your clients are seeing the same issue.

Heartbeat requesting "A User" which is something not done in previous version:
2021-11-18T10:35:09.093Z [ 4660: 6256] A Sending login status.
2021-11-18T10:35:09.094Z [ 4660: 6256] A User: myusername

Hi Westley, just checked our logs and we are not getting the same firewall errors as you are.

Thanks for checking!