I get the following error message after I type in the password and try to connect to one of our remote sites:
The client did not match the firewall policy configured on the central site VPN device. Cisco Systems Integrated Client Firewall should be enabled or installed on your computer.
I uninstall 4.0.3, rebooted, reinstalled 4.0.3 and same thing. I then uninstalled 4.0.3, rebooted, installed 4.7 and same thing.
I was using the McAfee Firewall, but gave ZoneAlarm a try (big mistake there as I'm finding out). I wasn't able to connect at all with VPN using ZoneAlarm so I got rid of that and put on the Sygate Personal Firewall which I actually like a lot better. That's when this problem began.
It *only* happens with one site, the other 15 or so connect up just fine. I checked and other engineers in here are able to connect to this site just fine.
I have spent the last couple of hours searching the 'net and trying different things to no avail.
I did a clean install of Windows XP Home on this laptop over the weekend to start fresh. I got into work this morning and tried to VPN to one of our remote sites, same error as before. I checked the log file and this is displayed:
Stateful Firewall (Always On) failed to start.
I am also getting a lot of TrueVector errors in the Event Log. ZoneAlarm has not been anywhere near this laptop since the reinstall so I know it's not a ZA issue.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
[toc:faq]Introduction:This document describes details on how NAT-T
works.Background:ESP encrypts all critical information, encapsulating
the entire inner TCP/UDP datagram within an ESP header. ESP is an IP
protocol in the same sense that TCP and UDP are I...