#SONICWALL IPSECURITAS VPN HOW TO#
#SONICWALL IPSECURITAS VPN UPDATE#
#SONICWALL IPSECURITAS VPN SOFTWARE#

We logged this with SonicWALL and followed typical troubleshooting procedures, which included performing a complete uninstall, checking to make sure we had the latest version, and sending them the error logs.

#SONICWALL IPSECURITAS VPN SOFTWARE#

On these, as soon as you select View | Certificates from the GVC menu, the software crashes.

#SONICWALL IPSECURITAS VPN UPDATE#

The only failure we’ve had with this client update process is on a couple of 64-bit Windows 8 Professional PCs. Since making these changes, our SonicWALL router passes the PCI DSS scan, and the VPN operates as normal. The GVC should now connect to the VPN as normal.įigure E Newly imported certificate available for selection. In the Select Certificate dialog, verify that it shows the correct certificate and click OK ( Figure E).

In the main GVC window, select the connection and click Enable. You should receive notification of a successful import, and the certificate will show in the list. Enter the password for the certificate and click OK ( Figure D).ĥ. Browse to the folder containing the SSL certificate and click Open.Ĥ. Unless a certificate has been previously imported, the list will be empty. Start the GVC and on the menu select View | Certificates.Ģ. They will also need a copy of the same certificate that was installed on the SonicWALL router, and the password used to encrypt it.ġ. I’m assuming that the user already has the SonicWALL Global VPN Client (GVC) installed on their PC, with a connection policy defined for your VPN. Caution: As soon as you make this change, users will be unable to connect to the VPN until they update their client settings.įigure B Updated settings on the General tab Client update After updating these settings on the General tab ( Figure B), click OK. (For our wildcard SSL certificate, we used *., replacing with our domain name.)Ħ. Under Peer Certificates, we found the settings that worked were to set Peer ID Type to Domain name and the Peer ID Filter to the domain covered by the certificate, e.g.,. Pick the name of your previously installed certificate.ĥ. This will enable the Gateway Certificate field. On the General tab under Security Policy, change Authentication Method from IKE Using Preshared Secret to IKE using 3 rd Party Certificates.Ĥ. Under VPN Policies locate WAN GroupVPN and click the pencil icon to configure it ( Figure A).ģ. Log in to the SonicWALL and navigate to VPN | Settings.Ģ. The second step, also on the SonicWALL router, was to change the VPN setting to use the newly installed certificate for authentication.ġ. This was the first step of the three steps required to make the VPN work and pass the Payment Card Industry Data Security Standard (PCI DSS) scan. I then described how we imported a suitable certificate into a SonicWALL router. In part one of this series, I explained why I needed to change an IPSec VPN from using pre-shared secret to SSL certificates for authentication.

#SONICWALL IPSECURITAS VPN HOW TO#

Here's how to switch to using certificates on the router and the VPN client to pass the scan. Fixing a PCI DSS scan failure on the SonicWALL IPSec VPN, part twoĪn IPSec VPN using pre-shared secret for authentication will fail PCI DSS security scans.

Sonicwall ipsecuritas vpn