Screen OS

last person joined: 8 months ago 

This is a legacy community with limited Juniper monitoring.

  • 1.  Does SSG support Remote IPSec VPN clients currently (10 Jul 2012)?

    Posted 07-11-2012 01:15

    Hi,

     

    Does SSG support Remote IPSec VPN clients currently (10 Jul 2012)?

    What is the recommended IPSec VPN client to use?



  • 2.  RE: Does SSG support Remote IPSec VPN clients currently (10 Jul 2012)?
    Best Answer

    Posted 07-11-2012 03:09

    To make the connection on the firewall you will use what ScreenOS calls dynamic vpn.  This is the kb that outlines the various configuration options.

    http://kb.juniper.net/InfoCenter/index?page=content&id=KB8535

    These reference the netscreen client but this will not support Win7 and is no longer supported by Juniper.  If you have win7 clients you will need to choose either the officially supported but paid NCP client.  See this thread

    http://forums.juniper.net/t5/ScreenOS-Firewalls-NOT-SRX/FAQ-available-for-NCP-s-IPsec-VPN-client-NCP-Secure-Client/td-p/40275

    And the kb
    http://kb.juniper.net/InfoCenter/index?page=content&id=KB17266

    Or the Shrew open source client is another option.
    http://www.shrew.net/support/wiki/HowtoJuniperSsg

     

    But any IPSEC client software can be used.