<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1881431401;
mso-list-type:hybrid;
mso-list-template-ids:1256487568 67698703 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l0:level1
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">I work with a lot of different customers who use a lot of different equipment to provide vpn connections so we can maintain equipment. I have been using Shrew for a while now for quite a few cisco vpn connections and haven’t had a problem.
I received a new pcf file from a new site and imported it into the client. When I load the connection and login, I connect, I see new routes that are built, but I cannot ping or access the one device they are permitting us to access. The cisco vpn client
works, but I cannot access anything with shrewsoft. <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I have done a lot of research trying to find an answer, but my vpn troubleshooting skills are not that strong. The customer is open to some guidance, but they will not let us work with their firewall. I have found mention of the following
possible issues:<o:p></o:p></p>
<p class="MsoListParagraph" style="text-indent:-.25in;mso-list:l0 level1 lfo1"><![if !supportLists]><span style="mso-list:Ignore">1.<span style="font:7.0pt "Times New Roman"">
</span></span><![endif]>Single host policy failing: <span style="color:#1F497D"><a href="https://lists.shrew.net/pipermail/vpn-help/2011-July/003879.html">https://lists.shrew.net/pipermail/vpn-help/2011-July/003879.html</a></span><o:p></o:p></p>
<p class="MsoListParagraph" style="text-indent:-.25in;mso-list:l0 level1 lfo1"><![if !supportLists]><span style="mso-list:Ignore">2.<span style="font:7.0pt "Times New Roman"">
</span></span><![endif]>Issues with split tunneling: <span style="color:#1F497D">
<a href="https://lists.shrew.net/pipermail/vpn-help/2009-October/001426.html">https://lists.shrew.net/pipermail/vpn-help/2009-October/001426.html</a></span><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">But none of those are for an ASA 5520. Can someone help with additional troubleshooting steps so I can guide the customers IT staff to make a slight change in their firewall so this works with Shrewsoft? Or, maybe tell me something I
can set in shrewsoft that might work?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Here are some highlights when connected with Shrewsoft:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">ASA 5520<o:p></o:p></p>
<p class="MsoNormal">Policy includes access to 1 IP address: 192.168.113.193/32<o:p></o:p></p>
<p class="MsoNormal">Connected client shows:<o:p></o:p></p>
<p class="MsoNormal">SA Established=1<o:p></o:p></p>
<p class="MsoNormal">Expired/Failed both = 0<o:p></o:p></p>
<p class="MsoNormal">Status=Connected<o:p></o:p></p>
<p class="MsoNormal">Transport=NAT-T RFC / IKE| ESP<o:p></o:p></p>
<p class="MsoNormal">IKE Fragmentation = disabled<o:p></o:p></p>
<p class="MsoNormal">Dead Peer Detection = enabled<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Computer routing table shows the following relevant new routes when connected (3.4.5.6 = :<o:p></o:p></p>
<p class="MsoNormal">Active Routes:<o:p></o:p></p>
<p class="MsoNormal">Network Destination Netmask Gateway Interface Metric<o:p></o:p></p>
<p class="MsoNormal"> 10.99.99.0 255.255.255.0 On-link 10.99.99.240 286<o:p></o:p></p>
<p class="MsoNormal"> 10.99.99.240 255.255.255.255 On-link 10.99.99.240 286<o:p></o:p></p>
<p class="MsoNormal"> 10.99.99.255 255.255.255.255 On-link 10.99.99.240 286<o:p></o:p></p>
<p class="MsoNormal"> 3.4.5.6 255. 255.255.255 10.10.40.1 10.10.40.101 21<o:p></o:p></p>
<p class="MsoNormal"> 192.168.113.193 255.255.255.255 On-link 10.99.99.240 31<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<br>
<table style="FONT-SIZE: 12px; FONT-FAMILY: Arial; LINE-HEIGHT: 18px" cellspacing="0" cellpadding="0" border="0">
<tbody>
<tr style="TEXT-DECORATION: ; BORDER-TOP-COLOR: ; BORDER-LEFT-COLOR: ; COLOR: ; BORDER-BOTTOM-COLOR: ; BORDER-RIGHT-COLOR: ">
<td colspan="4"></td>
</tr>
<tr style="TEXT-DECORATION: ; BORDER-TOP-COLOR: ; BORDER-LEFT-COLOR: ; COLOR: ; BORDER-BOTTOM-COLOR: ; BORDER-RIGHT-COLOR: ">
<td valign="top" width="122"><img border="0" hspace="0" src="cid:teldata2828716"></td>
<td valign="top" width="104"></td>
<td width="20"></td>
<td valign="top"><span style="FONT-SIZE: 16px; COLOR: #0e723b"><font color="#004dbb">Larry</font> <font color="#004dbb"></font>
<font color="#004dbb">Gray</font><br>
<font color="#004dbb">Technician</font></span> <br>
Phone: (317) 802-2530<br>
Fax: (317) 802-2531<br>
Extension: 22530<br>
E-mail: lgray@bgibson.com</td>
</tr>
<tr style="TEXT-DECORATION: ; BORDER-TOP-COLOR: ; BORDER-LEFT-COLOR: ; COLOR: ; BORDER-BOTTOM-COLOR: ; BORDER-RIGHT-COLOR: ">
<td colspan="4"><img src="cid:c17f1326-f74b-443b-854f-d8ebfcd977db0ca4d7"></td>
</tr>
</tbody>
</table>
<p class="MsoNormal" style="MARGIN: 0in 0in 0pt"><span lang="EN-AU" style="FONT-SIZE: 8pt; FONT-FAMILY: "Arial","sans-serif"; COLOR: gray; mso-ansi-language: EN-AU">Disclaimer: The information enclosed in this transmission is considered private & confidential and
may not be reproduced in any form without the senders permission. If you are not the intended recipient, any disclosure, copying, distribution, or any action taken or omitted to be taken in reliance on it is prohibited and is unlawful.<o:p></o:p></span></p>
<p class="MsoNormal" style="MARGIN: 0in 0in 0pt"><span lang="EN-AU" style="FONT-SIZE: 8pt; FONT-FAMILY: "Verdana","sans-serif"; COLOR: #00b050; mso-ansi-language: EN-AU">Please consider the environment,
<b>before</b> printing this email.</span><span lang="EN-AU" style="COLOR: #00b050; mso-ansi-language: EN-AU"><o:p></o:p></span></p>
<div style="color:#999999;font-size:11px;font-family:verdana"><br>
Disclaimer added by <b>CodeTwo Exchange Rules 2013</b><br>
<a href="http://www.codetwo.com/?sts=2532">www.codetwo.com</a></div>
<br>
</body>
</html>