[vpn-help] [Question] Shrew VPN client with Win7 - Netscreen SSG5

[Matthew Grooms]

On 8/18/2010 8:04 PM, Wo Chong wrote:
> Dear Matthew,
>
> I think may be you misunderstand what I mean, the Remote PC (with Win7
> OS) was still fail to get the reply from the local PC (192.168.111.10)
> even I stop the windows firewall, all connection from Remote pc to local
> was fail (like vnc, rdp etc), thanks!
>

The next thing I would check is if the ESP ( or UDP port 4500 packet if 
you are using NAT-T ) is getting back to the client host. You should see 
the inbound and outbound packets being processed in the ipsec demon 
debug level log output. This can be enabled using the VPN Trace 
application ...

http://www.shrew.net/support/wiki/BugReportVpnWindows

-Matthew