Link to home
Start Free TrialLog in
Avatar of nextleveltech
nextleveltech

asked on

Can't connect Sonicwall VPN from WinXP2 machine

Hi,

I have Sonicwall TZ firewall setup with VPN access.  I can access the VPN from all machines except from 2 brand Dell new laptops just added to the domain.  The laptops are running Windows XP Pro SP2.  The network is a SBS 2003.  When I attempt to connect to the VPN, I get prompted for my username and password but it can never connect.  It says that IKA packets have been blocked in the Sonicwall log.  I have disabled my McAfee ASAP firewall for the client machines and attempted to disable the Windows XP firewall but the options to turn it off are greyed out.  After removing the machine from the domain, I can disable the Win firewall but it still can not connect.  Readding the machine to the domain renables the firewall and greys out the options again.  Does the sonicwall require its clients to be a member of the domain?  Anyone have any suggestions why the machine would not connect to the VPN?  



Avatar of Jay_Jay70
Jay_Jay70
Flag of Australia image

Hi nextleveltech,

sounds like there is a policy on your domain that turns on your xp firewall - can you confirm that with an admin?
Avatar of nextleveltech
nextleveltech

ASKER

There is a policy that controls the firewall, currently it is set for a domain profile rather than a standalone.  However removing it fro the domain disables the firewall and converts it to a standalone profile but I still did not have better luck.  Also, the firewall does have an exception enabled for the VPN Client.
screw the windows firewall completely    its nothing but a bucket of  (*&$(&%
thanks for the responses, however I had disabled the firewall when I took the machine out of the domain. But,  I still could not connect.  Now I am not sure if sonicwall requires that the client be a part of a domain (never set a VPN up for a peer to peer), but I would have thought it would have worked.  

i havent dealt with the sonic wall side but i know most VPN's do require a domain membership of some sort
ASKER CERTIFIED SOLUTION
Avatar of Member_2_1968385
Member_2_1968385
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Thank you for your responses.  I have confirmed that Sonicwall does not require a domain account and that the Windows XP and McAfee firewalls were causing the issue.  

Thank yu very much