Solved

WatchGuard VPN cannot import wgx profile from WFS v7.5.0

Posted on 2009-04-12
6
4,176 Views
Last Modified: 2013-11-16
Firebox X500 running WFS v7.5.0
Using WSM 10.2.8 create Remote User using Shared Key .  There is no DVCP server.
Install Mobile VPN 10.10 on Vista 32bit machine.
Import Profile
Asked to Decrypt the User Profile
I enter the password, I am 100% sure it is correct (tried for a few remote users)
--> the password is not accepted.  I get the error "File could not be decrypted!"

Note: everything works fine when importing a .wgx from my other Firewall x550e running Fireware 10.2.3

What do you suggest?
0
Comment
Question by:Francois Koutchouk
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 
LVL 32

Expert Comment

by:dpk_wal
ID: 24130801
The file should get opened and the settings should get imported; it appears that the software is not installed properly; can you uninstall and reinstall the software or restore the system back and then install again.

If needed, we can manually configure the client.

Thank you.
0
 
LVL 1

Author Comment

by:Francois Koutchouk
ID: 24131035
I uninstalled MUVPN completely and re-installed -- on two different machines, same result.
Note that those machine can use the wgx from our other firewall -- so it looks like the VPN client software is working.
What else should I try?
0
 
LVL 1

Author Comment

by:Francois Koutchouk
ID: 24132707
Update: I think it is a Vista -- MUVPN issue:
- imported successfully my .wgx profile into an XP machine
- that XP machine is running an older version of MUVPN (10.04 Build 12).  I uninstalled the newer MUVPN from my Vista laptop and then installed 10.04 -- same result.

Strangely this occurring at the time I try to import the Profile -- not at the time of connecting (as I would expect if there was a conflict with some other software)
0
Threat Trends for MSPs to Watch

See the findings.
Despite its humble beginnings, phishing has come a long way since those first crudely constructed emails. Today, phishing sites can appear and disappear in the length of a coffee break, and it takes more than a little know-how to keep your clients secure.

 
LVL 32

Accepted Solution

by:
dpk_wal earned 125 total points
ID: 24137510
From your description is certainly sounds ilke Vista compatibility issue; as I said as a workaround we can configure the client manually. Normally when the software is not installed properly we see this problem; in case of Vista may be some component is not getting installed properly.

Another workaround is, you can export .spd file from XP machine and then load the file on Vista. SPD file does not contain any password; it is the security policy definition file.

Thank you.
0
 
LVL 1

Author Closing Comment

by:Francois Koutchouk
ID: 31569974
There is an incompatibility in Profile Import of a WFS 7.5 firewall and Vista and/or McAfee, regardless of the version of the VPN client.  I ended up copying the settings of the same profile imported on the XP machine, screen by screen.
0
 

Expert Comment

by:CharlieChicago
ID: 35098199
This posting did solve my problem.. But here is a quick update for WatchGuard 10.22 with Windows 7 Professional.  If the decrypt problem occurs,
1- export the XP profile as a   .ini
2- import into the WatchGuard 10.22 client
3- For the profile to work, you'll need to manually add the pass phrase
0

Featured Post

Easy, flexible multimedia distribution & control

Coming soon!  Ideal for large-scale A/V applications, ATEN's VM3200 Modular Matrix Switch is an all-in-one solution that simplifies video wall integration. Easily customize display layouts to see what you want, how you want it in 4k.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Using Windows 2008 RRAS, I was able to successfully VPN into the network, but I was having problems restricting my test user from accessing certain things on the network.  I used Google in order to try to find out how to stop people from accessing c…
To setup a SonicWALL for policy based routing to be used with the Websense Content Gateway there are several steps that need to be completed. Below is a rough guide for accomplishing this. One thing of note is this guide is intended to assist in the…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question