Screen OS

last person joined: 8 months ago 

This is a legacy community with limited Juniper monitoring.
  • 1.  Netscreen Remote VPN - No announcements for WIndows 7 support - Try this instead!

    Posted 10-14-2009 12:34

    Safenet and Juniper are still tight lipped regarding when Netscreen Remote will support Windows 7. I have tried calling them and posting on these forums but to no avail. See this thread as a reference:

    http://forums.juniper.net/jnet/board/message?board.id=Firewalls&thread.id=7950

    As a result, I have been researching other methods to perform a VPN connection. Windows 7 has a built in VPN Client but it is only designed for system to system VPN connectivity, and is not a full fledged IPSec VPN Client.

    After some more reading, I found a company named NCP, who has just released a product which is the first "Universal IPSec VPN Client" for Windows 7; meaning it supports Juniper, Cisco, and other config files!

    http://www.reuters.com/article/pressRelease/idUS129831+09-Feb-2009+MW20090209

    A download of the BETA can be found here:

    http://www.ncp-e.com/en/downloads/software.html

    I have loaded the BETA onto a Windows 7 box, imported my netscreen remote .spd file, and it works! The only hiccup I ran into is that I had to re-add my pre-shared key after importing the config file. I have several people testing this product, i will post any updates as I have them. 

    Enjoy!

    Message Edited by JMan12345 on 10-14-2009 12:36 PM


  • 2.  RE: Netscreen Remote VPN - No announcements for WIndows 7 support - Try this instead!

    Posted 10-14-2009 15:03
    Im going to try this as well. Anyone else configured L2TP on the Juniper? Any drawbacks?  http://kb.juniper.net/kb/documents/public/VPN/ScreenOS_Windows_L2TP_IPSec.pdf


  • 3.  RE: Netscreen Remote VPN - No announcements for WIndows 7 support - Try this instead!
    Best Answer

    Posted 10-15-2009 09:14
    I dont feel like L2TP is an enterprise solution based on what I am reading. Having to create multiple dial up connections is a pain, it doesnt support preshared keys, and its designed to be a policy based VPN, which breaks my model since I have a Hub and Spoke setup. So I chose the Universal VPN client. There is a cost to this client, but user reports so far have been great.


  • 4.  RE: Netscreen Remote VPN - No announcements for WIndows 7 support - Try this instead!

    Posted 10-19-2009 10:10
    Talked with my sales guy about this, NS Remote will not support Windows 7 period. Instead, Juniper is pushing their SSL VPN solution as the go forward VPN strategy. Also, found this KB Article: http://kb.juniper.net/KB8343


  • 5.  RE: Netscreen Remote VPN - No announcements for WIndows 7 support - Try this instead!

    Posted 10-20-2009 10:08
    the SSL vpn is well worth it!