[vpn-help] Client v2.2.0, Win7x64, Netgear FVS336G VPN Firewall - SA Fails

[Kevin VPN]

On 03/16/2013 04:19 PM, Thor Carlson wrote:
> Hello,
>
> Problem: Security Associations fails.
>
> VPN Client Version = 2.2.0 Windows OS Version = Windows 7 Ultimate N
> 64 bit Gateway Make/Model = Netgear FVS336G VPN Firewall upgraded to
> latest firmware rev. 3.0.7-24
>
>
> I'm able to establish the VPN tunnel and it appears that phase1 and
> phase2 complete successfully, however,  Security Associations fails.
> On the client's networks tab, the Security Associations group shows
> Established-0 Expired-0 Failed-2 (keeps counting up slowly) The
> Tunnel group shows connected. I'm unable to ping any IPs inside the
> remote network.
>
> I don't understand why SA would fail with phase1 and phase2
> succeeding.  Suggestions how to proceed?
>

Hi Thor,

I think SAs can fail if the security policy on the gateway isn't set 
correctly or if the settings in the Policy tab on Shrew are in conflict 
with what is set on the gateway.  I would start by looking there.