none
Juniper NetScreen VPN not working in Windows 7 Ultimate final version.

    Question

  • Hello,

    Just installed Windows 7 Ultimate final version on my IBM ThinkPad T60
    Windows 7 sucessfully installed drivers for Intel gigabyte ethernet adapter and internet etc working fine.
    Problem is when I installed Juniper NetScreen VPN, it showed me error saying "Failed to install adapter".
    Any1 had same problem?

    Any hints how to solve this issue?
    The setup.exe which I ran works fine on Windows vista.
    I am using following Netscreen version > SafeNet SoftRemote 10.8.3 [Build 6]

    Regards,
    Amey.

    Sunday, August 09, 2009 5:28 PM

Answers

  • Hi Amey,

    I have also confirmed the information mentioned in the blog, which can be seen at:-

    http://technet.microsoft.com/en-us/library/dd787668(WS.10).aspx

    This article mentions that IPSec VPN & SSL VPN have been tested on Windows 7 (Build: 7000), so there should not be any compatibility issue.  So it seems you should contact Juniper for further assistance.

    I have also found out an article at Juniper, which provide details regarding the products on Vista. Please navigate to the following link for the article:-

    http://kb.juniper.net/KB9144

     

    I hope above information helps you!

    Thanks,

    Shruti

     

    NOTE - Disclaimer

    The links in this message may lead to third-party Web sites. Microsoft provides third-party resources to help you find customer service and/or technical support resources. Information at these sites may change without notice. Microsoft is not responsible for the content at any third-party Web sites and does not guarantee the accuracy of third-party information.

     

    Tuesday, August 11, 2009 6:46 PM
    Moderator

All replies

  • Amey,

    I'm having the exact same problem, on my Dell 1710.

    I've also tried setting Compatibility of the Setup to 'Windows XP SP3' but that doesn't help either.

    I guess Juniper hasn't learned from the problems that occurred when Vista was released, I had to carry around a Windows XP VPC for more than a year after Vista was released before it finally worked on Vista. And even then I still had to pay for the upgrade ... rediculous !! It's not that I'm not willing to pay, but if they're charging me I expect them to make sure it works when the new windows OS is in RTM (or at least when it's released!!)

    If you (or anyone else) hear of a solution for this problem please post it here.


    Regards,
    Jurjen.

    Monday, August 10, 2009 7:48 AM

  • http://blogs.technet.com/rrasblog/archive/2009/05/05/vpn-client-compatibility-with-windows-7-and-windows-server-2008-r2.aspx

    Above URL shows Juniper has vpn client available for Windows 7 build 7000.

    I tried to access my Juniper account but it showed me "Access denied" message.
    I have just submitted request to Juniper.
    Not sure if they can provide me because my existing Netscreen-Remote shows no active contract/support for that product.
    It shows active contract for my SSG UTM boxes. This is actually not good. :(
    I am doing R & D. Will let you know for sure if I find any work around.
    I think OpenVPN software might work. Because once my client in US sent developers here OpenVPN client installer with config file & at there end they having some Juniper device only.
    Going to try that tonight.

    Regards,
    Amey.
    Monday, August 10, 2009 11:59 AM
  • I tried to install OpenVPN, it got installed, tried to configure that .ovpn file but there is not much option to put phase 1 & 2 encryption levels.

    Any1 sucessfully configured OpenVPN on windows 7 where your gateway/firewall device is Juniper appliance?

    Regards,
    Amey.
    Tuesday, August 11, 2009 5:55 AM
  • Hi Amey,

    I have also confirmed the information mentioned in the blog, which can be seen at:-

    http://technet.microsoft.com/en-us/library/dd787668(WS.10).aspx

    This article mentions that IPSec VPN & SSL VPN have been tested on Windows 7 (Build: 7000), so there should not be any compatibility issue.  So it seems you should contact Juniper for further assistance.

    I have also found out an article at Juniper, which provide details regarding the products on Vista. Please navigate to the following link for the article:-

    http://kb.juniper.net/KB9144

     

    I hope above information helps you!

    Thanks,

    Shruti

     

    NOTE - Disclaimer

    The links in this message may lead to third-party Web sites. Microsoft provides third-party resources to help you find customer service and/or technical support resources. Information at these sites may change without notice. Microsoft is not responsible for the content at any third-party Web sites and does not guarantee the accuracy of third-party information.

     

    Tuesday, August 11, 2009 6:46 PM
    Moderator
  • Hello,

    Tried by installing winfix & DTE exe from Citrix web site.
    Windows 7 failed to install DTE update. It showed me failed to install DTE update, unable to configure network componants.
    I followed above installation using default administrator account only.
    Also tried running them in Windows vista compatibility mode but it failed.

    I had same problem before & that time I was using Cisco VPN client.
    How ever after running DTE update it worked, I had to modify permissions for 2~3 files under system32.

    In this case it fails to install DTE update itself.

    Wednesday, August 12, 2009 3:21 AM
  • Having the same issue. Netscreen Remote Client is EOL. They are not going to support Windows7.

    http://kb.juniper.net/KB8343

    Wednesday, October 28, 2009 10:00 AM
  • Ok here is the fix.
    It's now working in my Windows 7 Ultimate laptop.

    >>

    1. Stop the Volume Shadow Copy service (VSS) (which prompt an error message when I tried to install the client)
    2. Install Juniper Client and ignore the error messages about the virtual adapter

    3. Restart your PC
    4. If Microsoft IKE and IPSec services are running, stop them
    5. Import you Security Policy
    6. Startup the Service SafeNet IKE Service
    7. Connect to your network

    • Proposed as answer by Chip009 Friday, March 11, 2011 6:37 PM
    Tuesday, December 15, 2009 11:39 AM
  • Hi Amey,  unfortunately your setup doesn't  work for me :(
    This is what i get :

    12-15: 15:52:11.162 NetScreen-Remote Version 10.8.5 (Build 2).
    12-15: 15:52:14.173 Interface added: 192.168.1.109/255.255.255.0 on LAN "Broadcom 802.11n Network Adapter".
    12-15: 15:52:14.173 Clearing arp for adapter 12
    12-15: 15:52:14.453 Filter table loaded (3 entries).
    12-15: 15:52:14.469 This is a GA version of NetScreen-Remote.
    12-15: 15:52:41.495
    12-15: 15:52:41.495 My Connections\dmz - Initiating IKE Phase 1 (IP ADDR=*.*.*.130)
    12-15: 15:52:41.620 My Connections\dmz - SENDING>>>> ISAKMP OAK AG (SA, KE, NON, ID, VID 6x)
    12-15: 15:52:41.683 My Connections\dmz - RECEIVED<<< ISAKMP OAK AG (SA, VID 4x, KE, NON, ID, HASH)
    12-15: 15:52:41.683 My Connections\dmz - Peer supports Dead Peer Detection Version 1.0
    12-15: 15:52:41.683 My Connections\dmz - Dead Peer Detection enabled
    12-15: 15:52:41.776 My Connections\dmz - SENDING>>>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_REPLAY_STATUS, NOTIFY:STATUS_INITIAL_CONTACT)
    12-15: 15:52:41.776 My Connections\dmz - Established IKE SA
    12-15: 15:52:41.807 My Connections\dmz - RECEIVED<<< ISAKMP OAK TRANS *(HASH, ATTR)
    12-15: 15:52:48.001 My Connections\dmz - RECEIVED<<< ISAKMP OAK TRANS *(Retransmission)
    12-15: 15:52:49.264 My Connections\dmz - SENDING>>>> ISAKMP OAK TRANS *(HASH, ATTR)
    12-15: 15:52:49.295 My Connections\dmz - RECEIVED<<< ISAKMP OAK TRANS *(HASH, ATTR)
    12-15: 15:52:49.295 My Connections\dmz - Received Private IP Address = IP ADDR=*.*.*.150
    12-15: 15:52:49.951 No Virtual Adapters available.
    12-15: 15:52:49.951 My Connections\dmz - Failed to create required virtual adapter
    12-15: 15:52:49.951 My Connections\dmz - Deleting IKE SA (IP ADDR=*.*.*.130)
    12-15: 15:52:49.951 My Connections\dmz - SENDING>>>> ISAKMP OAK INFO *(HASH, DEL)
    Tuesday, December 15, 2009 4:03 PM
  • Hi Amey,  unfortunately your setup doesn't  work for me :(
    This is what i get :

    12-15: 15:52:11.162 NetScreen-Remote Version 10.8.5 (Build 2).
    12-15: 15:52:14.173 Interface added: 192.168.1.109/255.255.255.0 on LAN "Broadcom 802.11n Network Adapter".
    12-15: 15:52:14.173 Clearing arp for adapter 12
    12-15: 15:52:14.453 Filter table loaded (3 entries).
    12-15: 15:52:14.469 This is a GA version of NetScreen-Remote.
    12-15: 15:52:41.495
    12-15: 15:52:41.495 My Connections\dmz - Initiating IKE Phase 1 (IP ADDR=*.*.*.130)
    12-15: 15:52:41.620 My Connections\dmz - SENDING>>>> ISAKMP OAK AG (SA, KE, NON, ID, VID 6x)
    12-15: 15:52:41.683 My Connections\dmz - RECEIVED<<< ISAKMP OAK AG (SA, VID 4x, KE, NON, ID, HASH)
    12-15: 15:52:41.683 My Connections\dmz - Peer supports Dead Peer Detection Version 1.0
    12-15: 15:52:41.683 My Connections\dmz - Dead Peer Detection enabled
    12-15: 15:52:41.776 My Connections\dmz - SENDING>>>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_REPLAY_STATUS, NOTIFY:STATUS_INITIAL_CONTACT)
    12-15: 15:52:41.776 My Connections\dmz - Established IKE SA
    12-15: 15:52:41.807 My Connections\dmz - RECEIVED<<< ISAKMP OAK TRANS *(HASH, ATTR)
    12-15: 15:52:48.001 My Connections\dmz - RECEIVED<<< ISAKMP OAK TRANS *(Retransmission)
    12-15: 15:52:49.264 My Connections\dmz - SENDING>>>> ISAKMP OAK TRANS *(HASH, ATTR)
    12-15: 15:52:49.295 My Connections\dmz - RECEIVED<<< ISAKMP OAK TRANS *(HASH, ATTR)
    12-15: 15:52:49.295 My Connections\dmz - Received Private IP Address = IP ADDR=*.*.*.150
    12-15: 15:52:49.951 No Virtual Adapters available.
    12-15: 15:52:49.951 My Connections\dmz - Failed to create required virtual adapter
    12-15: 15:52:49.951 My Connections\dmz - Deleting IKE SA (IP ADDR=*.*.*.130)
    12-15: 15:52:49.951 My Connections\dmz - SENDING>>>> ISAKMP OAK INFO *(HASH, DEL)

    I am using Following GA version of NetScreen > 10.8.3 [ Build 6 ]

    Make sure you start your Safe Net IKE service from services.msc and then connect to Juniper vpn.
    Also verify your "Pre shared" key.
    This retransmission error explains problem is with the "pre shared" key or user name in "policy.spd".
    Contact your network admin and he'll repair it for you.
    You'll have to manually start SafeNet IKE service.

    Regards.
    Tuesday, December 15, 2009 8:56 PM
  • Here is output from my laptop which is also on wi-fi adapter


    [quote]12-16: 02:28:05.148 Interface added: 192.168.1.6/255.255.255.0 on LAN "11a/b/g Wireless LAN Mini PCI Express Adapter".
    12-16: 02:28:05.165 Clearing arp for adapter 11
    12-16: 02:28:05.217 Interface added: 192.168.56.1/255.255.255.0 on LAN "VirtualBox Host-Only Ethernet Adapter".
    12-16: 02:28:05.233 Clearing arp for adapter 21
    12-16: 02:28:05.659 Filter table loaded (2 entries).
    12-16: 02:28:05.689 This is a GA version of NetScreen-Remote.
    12-16: 02:28:22.313
    12-16: 02:28:22.313 My Connections\Ssss_city  - Initiating IKE Phase 1 (IP ADDR=abc.ab.ab.abc)
    12-16: 02:28:22.503 My Connections\Ssss_city  - SENDING>>>> ISAKMP OAK AG (SA, KE, NON, ID, VID 6x)
    12-16: 02:28:22.560 My Connections\Ssss_city  - RECEIVED<<< ISAKMP OAK AG (SA, VID 4x, KE, NON, ID, HASH, VID, NAT-D 2x)
    12-16: 02:28:22.560 My Connections\Ssss_city  - Peer supports Dead Peer Detection Version 1.0
    12-16: 02:28:22.560 My Connections\Ssss_city  - Dead Peer Detection enabled
    12-16: 02:28:22.560 My Connections\Ssss_city - Peer is NAT-T draft-02 capable
    12-16: 02:28:22.560 My Connections\Ssss_city  - Dead Peer Detection enabled
    12-16: 02:28:22.560 My Connections\Ssss_city  - NAT is detected for Client
    12-16: 02:28:22.560 My Connections\Ssss_city  - Floating to IKE non-500 port
    12-16: 02:28:22.673 My Connections\Ssss_city  - SENDING>>>> ISAKMP OAK AG *(HASH, NAT-D 2x, NOTIFY:STATUS_REPLAY_STATUS, NOTIFY:STATUS_INITIAL_CONTACT)
    12-16: 02:28:22.673 My Connections\Ssss_city  - Established IKE SA
    12-16: 02:28:22.674 My Connections\Ssss_city  -   MY COOKIE ae ff xx e4 42 gf fb 0
    12-16: 02:28:22.674 My Connections\Ssss_city  -   HIS COOKIE b9 23 00 ag c0 03 f9 36
    12-16: 02:28:22.710 My Connections\Ssss_city  - RECEIVED<<< ISAKMP OAK TRANS *(HASH, ATTR)
    12-16: 02:28:28.996 My Connections\Ssss_city  - RECEIVED<<< ISAKMP OAK TRANS *(Retransmission)
    12-16: 02:28:29.601 My Connections\Ssss_city  - SENDING>>>> ISAKMP OAK TRANS *(HASH, ATTR)
    12-16: 02:28:29.633 My Connections\Ssss_city  - RECEIVED<<< ISAKMP OAK TRANS *(HASH, ATTR)
    12-16: 02:28:29.634 My Connections\Ssss_city  - Received DNS Address = IP ADDR=192.168.1.115
    12-16: 02:28:29.634 My Connections\Ssss_city  - Received DNS Address = IP ADDR=192.168.1.145
    12-16: 02:28:29.634 My Connections\Ssss_city  - Received Private IP Address = IP ADDR=200.200.1.107
    12-16: 02:28:29.674 My Connections\Ssss_city   - SENDING>>>> ISAKMP OAK TRANS *(HASH, ATTR)
    12-16: 02:28:29.848 My Connections\Ssss_city  - Initiating IKE Phase 2 with Client IDs (message id: AE2AE100)
    12-16: 02:28:29.848 My Connections\Ssss_city  -   Initiator = IP ADDR=200.200.1.107, prot = 0 port = 0
    12-16: 02:28:29.848 My Connections\Ssss_city  -   Responder = IP SUBNET/MASK=192.168.1.0/255.255.255.0, prot = 0 port = 0
    12-16: 02:28:29.848 My Connections\Ssss_city  - SENDING>>>> ISAKMP OAK QM *(HASH, SA, NON, KE, ID 2x)
    12-16: 02:28:29.848 My Connections\Ssss_city - RECEIVED<<< ISAKMP OAK TRANS *(HASH, ATTR)
    12-16: 02:28:29.849 My Connections\Ssss_city  - IKE Extended Authentication successful.
    12-16: 02:28:29.849 My Connections\Ssss_city  - Setting compliance status to OK.
    12-16: 02:28:29.849 My Connections\Ssss_city  - Calling UpdateBypassRecordsForCompliance - OK.
    12-16: 02:28:29.849 My Connections\Ssss_city  - SENDING>>>> ISAKMP OAK TRANS *(HASH, ATTR)
    12-16: 02:28:33.974 My Connections\Ssss_city  - RECEIVED<<< ISAKMP OAK QM *(HASH, SA, NON, KE, ID 2x)
    12-16: 02:28:34.030 My Connections\Ssss_city  - Filter entry 3 added: SECURE  192.168.001.006&255.255.255.255  192.168.001.000&255.255.255.000  abc.0ab.0ab.abc
    12-16: 02:28:34.030 My Connections\Ssss_city - SENDING>>>> ISAKMP OAK QM *(HASH)
    12-16: 02:28:34.096 My Connections\Ssss_city  - Loading IPSec SA (Message ID = AE2AE487 OUTBOUND SPI = 5BBCFFE1 INBOUND SPI = 9EF2ABC9)
    12-16: 02:28:34.096 [/quote]
    Tuesday, December 15, 2009 9:05 PM
  • Hi Amey,

    I´m using Netscreen Remote for years. Actually my quality of life depends on this damned VPN tunnel, because it provides a better time management and allows me more time outside my professional environment. Recently I upgraded my Hard - and Software including Win 7 Professional 64 bit. I followed the reports about the problems with NSR with some sorrow, awaiting some unfriendly nights. So I downloaded and installed Virtual XP Mode for Win 7, installed it and tried to install NSR: it´s running perfectly! The performance of the XP Mode is not so bad, in fact it´s even better than before my migration ( due to better performing hardware ). I didn´t try other virtual machines like VMware or things like that, because I left my time for software improvisation behind me. For some guys it may be cool to disrupt microsoft products: but virtual XP Mode and NSR really works! Hope that my recommendation will help you.

    Kokomiko
    Thursday, December 31, 2009 2:25 AM
  • @ koko > My problem already got resolved. I am now alble to use NetScreen Remote VPN client software in my Windows 7 [ 32 bit ] laptop with no problem.
    I am not sure if you tried to follow the steps I mentioned in my above thread. May be should work for your 64 bit Windows 7 as well.

    Regards,
    Amey.
    Saturday, January 02, 2010 2:04 PM
  • I am using Following GA version of NetScreen > 10.8.3 [ Build 6 ]

    Make sure you start your Safe Net IKE service from services.msc and then connect to Juniper vpn.
    Also verify your "Pre shared" key.
    This retransmission error explains problem is with the "pre shared" key or user name in "policy.spd".
    Contact your network admin and he'll repair it for you.
    You'll have to manually start SafeNet IKE service.

    Regards.

    Hi Amey
    We are fighting the same battle here, as we are just rolling out Win 7 for our business.  Only just picked up on the fact that Juniper Netscreen client does not work properly on 7.
    I have worked through the information given above, but we still have the "failed to creat virtual adapter" issue.  You note that the key / username in the policy file needs to be repaired, which we cannot do as this was created by our ISP.
    Do you have any other thoughts on what we could do?
    Brett
    Tuesday, January 05, 2010 11:18 PM
  • I am using Following GA version of NetScreen > 10.8.3 [ Build 6 ]

    Make sure you start your Safe Net IKE service from services.msc and then connect to Juniper vpn.
    Also verify your "Pre shared" key.
    This retransmission error explains problem is with the "pre shared" key or user name in "policy.spd".
    Contact your network admin and he'll repair it for you.
    You'll have to manually start SafeNet IKE service.

    Regards.

    Hi Amey
    We are fighting the same battle here, as we are just rolling out Win 7 for our business.  Only just picked up on the fact that Juniper Netscreen client does not work properly on 7.
    I have worked through the information given above, but we still have the "failed to creat virtual adapter" issue.  You note that the key / username in the policy file needs to be repaired, which we cannot do as this was created by our ISP.
    Do you have any other thoughts on what we could do?
    Brett


    Hello,

    Finish the installation of JNS even if it throws "virtual adapter" error.
    Import  your psd file.
    go to services.msc and start Juniper IKE service
    MAke sure "Volume Shadow copies" service is not running.
    Once you start service manually, freezed icon of JSN will become active.
    Now right click and connect.
    I dont no why its not working on your PC.
    May be I check remotely by connecting via "team viewer" application or Web Ex.
    Drop me e-mail at  vega_yaa at hotmail dot com

    Regards,
    AmeY.
    • Proposed as answer by Denis Mourghen Wednesday, December 01, 2010 10:43 AM
    Wednesday, January 06, 2010 1:44 PM
  • Yes I can confirm it's working for me on Win7 32 bit.  You will have to start the service manually every time you want to connect.  It's just one more step to do but it's better than going thru setting up L2TP with IPSec.  Thanks a lot AmeY
    Thursday, January 14, 2010 11:43 PM

  • Hello,

    Finish the installation of JNS even if it throws "virtual adapter" error.
    Import  your psd file.
    go to services.msc and start Juniper IKE service
    MAke sure "Volume Shadow copies" service is not running.
    Once you start service manually, freezed icon of JSN will become active.
    Now right click and connect.
    I dont no why its not working on your PC.
    May be I check remotely by connecting via "team viewer" application or Web Ex.
    Drop me e-mail at  vega_yaa at hotmail dot com

    Regards,
    AmeY.
    Hi
    Yes, done that a couple of times, have tried two different Win 7 pro laptops with this.
    Installation completes fine (VSC is not running), but does show the virtual adapter error, which you mention is ok.
    Policy imports fine, though there is no "Juniper IKE service", only the Safenet IKE service (which I assume you mean)
    We are getting username / password entry screen, accepts it, but then will not start due to the virtual adapter not starting.
    I have been told that the product manager at our ISP has a team working on a fix, so we'll see how we go with that.

    Thanks for your help,
    Brett




    Sunday, January 17, 2010 11:31 PM
  • Hi,

    Following your steps, I can start properly Netscreen Remote 10.8.3 [build 6] on my Windows 7 laptop.

    But when I right click and try to connect, the connection does not appear, even if the policy is correctly imported.

    Any suggestions? Regards,

    Josu
    Monday, February 01, 2010 9:13 AM
  • Hi,

    Following your steps, I can start properly Netscreen Remote 10.8.3 [build 6] on my Windows 7 laptop.

    But when I right click and try to connect, the connection does not appear, even if the policy is correctly imported.

    Any suggestions? Regards,

    Josu


    Start "SafeNet IKE service" from  "services.msc" & then right click on Juniper vpn icon in taskbar.

     

    Monday, February 01, 2010 10:18 AM
  • Hi Amey,

    I did it, and then the icon in taskbar gets available. I can access aswell the policy and modify it, but when I right click to connect any connection appears.

    Thanks,
    Monday, February 01, 2010 12:06 PM
  • After reinstalling selecting the "Express" option, I can see the imported policies and the system connects properly.

    Thanks,
    Tuesday, February 16, 2010 9:57 AM
  • Funcionó!, solamente faltaba ejecutar SafeNet IKE Service, que no estaba arriba.

    Gracias, saludos.

    Thursday, July 01, 2010 5:32 PM
  • ReneDoria > Aare tuza problem solve zala ka?

     

    Greetings from ~~ India ~~

    Friday, July 02, 2010 7:01 AM
  • Here's another answer, that while I am only just about to try, may be a better solution moving forward.

    I contacted SafeNet, who appears to be the actual author of the VPN software client.

    This is their response:

    "Hello,

                    You are correct, Juniper’s Netscreen Remote is based off of our product.  They did not purchase our Windows 7 software – so it is not available to them.  You can purchase this software directly from our website – www.safenet-inc.com – there is a link for “Buy SoftRemote”.  The product you  are looking for is HARemote 2.0.  This will support XP,  Vista, and Windows 7 x86 based machines.  It DOES NOT support 64bit machines.  Please let me know if you have any further questions."

    He further affirmed that he's using it in his own lab, with a Netscreen 5gt. (same unit as me)

    So, I feel pretty confident. Off to see how much it is... :-)

    Friday, July 16, 2010 4:16 PM
  • Hidden, under quicklinks on the right.

    Buy HARemote

    $149, ouch. But, if it works...

    Friday, July 16, 2010 4:24 PM
  • Fully functional. Windows 7, 32bit. VPN to my NetScreen router and local LAN.

    Thoguht we had some issues initially, as we couldn't get it to connect using a tethered device to create a wan access. (so that we could test getting back into the lan, remotely) But Nick the tech at SafeNet was great about it, and we narrowed things down.

    Turns out the iPhone bluetooth network connection (tether), seems to have a glitch, from/with Windows7. Could be either Windows or the iPhone, not sure. It's ONLY the bluetooth though, as when I used the USB cable to tether the iPhone and make network access, the VPN worked perfectly.

    (we could narrow it further, if I had another BT data tether device, but I do not)

    Anyhow, solution.

    Friday, July 16, 2010 9:24 PM
  • Dear Sir,

    Having used this piece of software for several weeks, I am pleased to report that HARemote (with almost identical look and feel of SoftRemote) is fully functional on Windows 7 (albeit 32 bit version only).  Please note that .spd files are compatible in between HARemote and SoftRemote, which would facilitate transition to Windows 7.

    Sincerely,

     

    http://biz.safenet-inc.com/cart/cartView.asp?act=add&item=130&cc=../prod/software/software_a.asp

    http://biz.safenet-inc.com/prod/software/index.asp

    SafeNet’s HARemote (formerly SoftRemote) software secures desktops and laptops interoperating with a variety of gateway devices.

    http://biz.safenet-inc.com/prod/software/software_a.asp

    SafeNet's HARemote® is built on immense security expertise and unsurpassed technology that is already used by industry leaders including Cisco, Worldcom, RSA Security, Watchguard, Secure Computing, 3Com, and NetScreen. Since HARemote® has become the de facto standard for remote access in the industry, its core technology has been used to build other variations of HARemote that addresses the security vulnerabilities in 802.11b applications and other wireless applications.

    ----------

    HARemoteLT.jpg

    Secure VPN Client - SafeNet HighAssurance RemoteLT

    SafeNet HighAssurance Remote 2.0.0 (Build 8)

    SafeNet, Inc.
    (c) 1997-2010 SafeNet, Inc. All rights reserved.

    SafeNet HighAssurance RemoteLT

    This is a GA version of SafeNet HighAssurance RemoteLT.

    Monday, July 26, 2010 5:17 AM
  • Hi, I just went through a long analysis to figure out why some VPN clients are not working on Windows 7 when using wireless modems (Mobile Broadband, WWAN) devices. The compatibility page testing was not done with cellular data cards that use the new Mobile Broadband networking stack. Here is a explanation of why the problem exists and some workaround ideas that you should be able to use to help with the MB devices:

    http://www.customsoftwareframeworks.com/blog/fix-vpn-problems-cellular-win7

    There is a product that uses an NDIS 6.2 LWF driver that is WHQL signed on win7 x86 and x64 and can talk to cisco vpn servers.

    Thanks

    Wednesday, August 11, 2010 2:02 PM
  • The NCP VPN software is the official recommended replacement for the Netscreen Remote product for Windows 7 (and previous).

    I have tested it  on Windows 7 64-bit and it works fine - you can import your .SPD files easily. There is no point in the HARemote software as its a dead end with no 64-bit support - half of all laptops are now Win7 64bit - and virtually all the business laptops I see.

    The 'universal' version of NCP (thats isnt tied to Junieper firewalls) is £95 with the Juniper specific one being £69.50

     

    see:

    http://www.ncp-e.com/en/about-us/oem-partners/ncp-juniper-alliance.html

     

    and:

    http://kb.juniper.net/InfoCenter/index?page=content&id=KB17266

     

    Thursday, October 21, 2010 11:22 PM
  • Hi

    I had the same issue with Netscreen Remote VPN and each time I had to start the Safenet IKE service on my Windows 7 when switch on.  However I found a way to make Windows 7 automatically start the service each time I log on my laptop.  So if anyone is interested to know how to do it, contact me on my email dmourghen@hotmail.com. I will send you the steps by mail.

    Cheers,

    Wednesday, December 01, 2010 10:47 AM
  • Hi Guys, 

    I have managed to get around this - 
    Make sure you disable any other VPN that is running or set it to manual

    Make sure the local administrator account is enabled
    Restart and login with this account (Administrator)

    Turn off UAC

    Now change the compatible mode of the setup.exe 
    Change the settings for all users - to run as administrator and choose the option for XP - SP3

    Now install and restart.

    Now import any certificate that is require etc

    By default the Safenet IKE service will not start - so go to services.msc and start the service.

    Enjoy
    Tuesday, February 01, 2011 11:45 AM
  • You need to be clear if you are running Windows-7 32 or 64 bit - i.e. state it in your posts.

    I had no joy installing Netscreen Remote under Win7 64 bit and I don't think there is any work around. Setup stopps with 'Aborting installation" at 46%

    If anyone knows otherwise let us know.

     

    **Update**

    Ok, after looking at all the work arounds I decided to stop wasting effort on a defunct product. I had tried Shrewsoft free VPN before but it never worked - I ran it again today (v2.1.7) and after an hour of fiddling came up with settings which worked perfectly. Its pretty similar to Netscreen Remote in terms of interface though the connection trace isnt as verbose. It was completely stable (running on Win 7 Pro 64 bit) - I'll report back if otherwise over time.

    Here are the settings I used. Note that I don't use DNS from the remote site with my connections - I use the VPN for remote support etc. and connect using IPs so dont need that (ie. step 5) - ammend as required.

    Also note that the Phase 1 and 2 proposal algorithms work fine when set to 'Auto'.  If you use 3des-sha for example you can specify that explicity but it worked as auto so I left as that.

     

    1. Download and setup the Shrewsoft VPN software: http://www.shrew.net/home

    2. Open the Shrewsoft 'Access Manager ' and Click 'Add' to add a new policy

     

    3. Under the 'General' tab:

    - Host Name or IP Address: <IP of your Netscreen or other VPN gateway>

    - Auto Configuration: <disabled>

    - Local Host/Address Method : <Use an Existing adapter and current address>

     

    4. 'Client' tab:

    - Firewall options: leave all as is (enable/4500/15/540)

    - Other Options: Tick 'Enable Dead Peer Detection' / Tick 'Enable ISAKMP Failure..'

     

    5. 'Name Resolution ' Tab:

    - Untick everything (or as required)

     

    6. 'Authentication ' tab:

    - Authentication Method: <Mutual PSK>

    - Local Identity: identification type 'User Fully Qualified Domain Name' / UFQDN String: <your ID string - e.g. me@myco.com>

    - Remote Identity: Identification Type: 'IP Address' / Tick 'Use a discovered remote hose address'

    - Credentials: enter your pre-shared key

     

    6. 'Phase 1' tab: (set as per your firewall setup - typical settings as below)

    - Exchange type: agressive

    - DH Exchange: group 2

    - Cipher Algorithm: auto

    - Hash Algorithm: auto

    - Key Life Time limit: 86400

    - Key Life Data limit: 0

    - Untick 'Enable Check point ..'

     

    7. 'Phase 2' tab:

    - Transform algorithm: auto

    - HMAC Algorithm: auto

    - PFS Exchange: auto

    - Compression Algorithm: disabled

    - Key Life Time limit: 3600

    - Key Life Data limit: 0

     

    8. 'Policy ' tab

    - Policy generation level: 'auto'

    - Tick : 'Maintain Persistent Security Associations'

    - Untick : 'Obtain Topology Automatically ..'

    - Click 'Add ' and enter the IP and mask of the remote PC or subnet - e.g. 192.168.20.0 / 255.255.255.0

     

    9. Click on Save


    10. Click the Connect button to open the connection window and then click the following Connect button

    - The network tab will show 'Established - 1' if the link is properly up

    - If it doesnt the re-check all your settings

     

    I'm relieved I dont have to shell out ££ to get a new client. I had tried both Greenbow and the NCP VPN clients - both worked fine but cost too much. The NCP client can import Netscreen Remote policy files but its no better then the Shrewsoft offering.

    Sunday, February 06, 2011 11:51 PM
  • This worked great for us after trying everything else on the internet.

    I didn't stop any of the services as they were not running as soon as I started SafeNet IKE service the connections became available in Net Remote.

     

    Using NetRemote 9 on Windows 7 32bit to VPN into Juniper SSG5

    Thank you Amey!

    Friday, March 11, 2011 6:41 PM
  • Amey's instructions above work fine in a Windows 7, 32-bit environment.

    But, the NS Remote client must be version 10.8.10 (Build 4).

    This is the latest available NS Remote VPN client from Juniper, and is Vista compatable.

    With that said, here are the basic instructions copied from a user on a juniper forum:

    I have connected with these instructions and used VNC to access remote servers.

    I have not tried this in a Windows 7 64-bit environment.

    http://forums.juniper.net/t5/ScreenOS-Firewalls-NOT-SRX/Windows-7-and-Netscreen-remote-client/td-p/18319/page/2

    1. Stop the Volume Shadow Copy service (VSS) (which prompt an error message when I tried to install the client)
    2. Install Juniper Client and ignore the error messages about the virtual adapter
    3. Restart your PC
    4. If Microsoft IKE and IPSec services are running, stop them
    5. Import you Security Policy
    6. Startup the Service SafeNet IKE Service
    7. Connect to your network

     

    This has worked for me but the only downside is that this doesn't resolve the issue with the safenet adapter not installing, so that means DNS will not function once connected to your VPN. You must access network resources using ip addresses. Also, you will need to start the Safenet IKE service after each reboot. I suggest that you should create a .bat file with the following cmd:

    net start IreIKE

    This is best for my needs since I only need my VPN access for remote desktop connections and not anything that relies on DNS. If you need DNS with your VPN activities I suggest installing a Win XP virtual machine to access your VPN.
    Sunday, May 08, 2011 4:33 PM
  • Hi Amey,

    i gave it a try on Win7 32-bit and still cannot succeed. Here is what i get:

     

    7-07: 15:01:50.956 Error sending driver registration: 10038

     7-07: 15:01:55.974 Error sending driver registration: 10038

     7-07: 15:02:01.002 Error sending driver registration: 10038

     7-07: 15:02:06.029 Error sending driver registration: 10038

     7-07: 15:02:11.053 Error sending driver registration: 10038

     7-07: 15:05:36.602 Error enabling broadcast: 10038

     7-07: 15:05:36.612 Error enabling broadcast: 10038

     7-07: 15:05:36.708 Interface lost: 10.193.183.175

     7-07: 15:05:36.734 Filter table loaded (2 entries).

     7-07: 15:05:37.778 Failed to register for driver notifications.

     7-07: 15:05:37.886 IreIKE: Unable to bind IKE socket!

     7-07: 15:05:37.888 IreIKE: Unable to bind IKE non-500 socket!

     7-07: 15:05:37.889 IreIKE: Unable to bind IPC  socket!

     7-07: 15:05:37.999 Error sending driver registration: 10038

     7-07: 15:05:38.278 recvfrom () : 2736

     7-07: 15:05:38.278 recvfrom () : 2736

     7-07: 15:05:38.278 recvfrom () : 2736

     7-07: 15:05:43.047 Error sending driver registration: 10038

     7-07: 15:05:43.091 Interface added: 10.193.183.175/255.255.255.0 on LAN "Intel(R) Centrino(R) Advanced-N 6200 AGN".

     7-07: 15:05:43.102 Clearing arp for adapter 12

     7-07: 15:05:43.125 Filter table loaded (2 entries).

     7-07: 15:43:28.376 

     7-07: 15:43:28.376 My Connections\HuaweiCTAC - Initiating IKE Phase 1 (IP ADDR=206.47.90.83)

     7-07: 15:43:28.384 My Connections\HuaweiCTAC - SENDING>>>> ISAKMP OAK MM (SA, VID 2x)

     7-07: 15:43:43.985 My Connections\HuaweiCTAC - message not received! Retransmitting!

     7-07: 15:43:43.985 My Connections\HuaweiCTAC - SENDING>>>> ISAKMP OAK MM (Retransmission)

     7-07: 15:43:58.988 My Connections\HuaweiCTAC - message not received! Retransmitting!

     7-07: 15:43:58.988 My Connections\HuaweiCTAC - SENDING>>>> ISAKMP OAK MM (Retransmission)

     7-07: 15:44:13.990 My Connections\HuaweiCTAC - message not received! Retransmitting!

     7-07: 15:44:13.990 My Connections\HuaweiCTAC - SENDING>>>> ISAKMP OAK MM (Retransmission)

     7-07: 15:44:28.991 My Connections\HuaweiCTAC - Exceeded 3 IKE SA negotiation attempts

     7-07: 15:47:06.938 

     7-07: 15:47:06.938 My Connections\HuaweiCTAC - Initiating IKE Phase 1 (IP ADDR=206.47.90.83)

     7-07: 15:47:06.946 My Connections\HuaweiCTAC - SENDING>>>> ISAKMP OAK MM (SA, VID 2x)

     7-07: 15:47:22.014 My Connections\HuaweiCTAC - message not received! Retransmitting!

     7-07: 15:47:22.014 My Connections\HuaweiCTAC - SENDING>>>> ISAKMP OAK MM (Retransmission)

     7-07: 15:47:37.018 My Connections\HuaweiCTAC - message not received! Retransmitting!

     7-07: 15:47:37.018 My Connections\HuaweiCTAC - SENDING>>>> ISAKMP OAK MM (Retransmission)

     7-07: 15:47:52.019 My Connections\HuaweiCTAC - message not received! Retransmitting!

     7-07: 15:47:52.019 My Connections\HuaweiCTAC - SENDING>>>> ISAKMP OAK MM (Retransmission)

     7-07: 15:48:07.048 My Connections\HuaweiCTAC - Exceeded 3 IKE SA negotiation attempts

    i guess i have to check with the admin of the peer server why it cannot receive these keys sent by my laptop.

    any other ideas?

    this is not really my stuff so any help will be much appreciated.

     

    Thursday, July 07, 2011 8:30 PM
  • Hi,

    Following your steps, I can start properly Netscreen Remote 10.8.3 [build 6] on my Windows 7 laptop.

    But when I right click and try to connect, the connection does not appear, even if the policy is correctly imported.

    Any suggestions or is there any Windows Support for it?


    Friday, July 08, 2011 10:02 PM
  • It works perfectly !!!!

    Thanks really !!!!

     

    ok here is the fix.
    It's now working in my Windows 7 Ultimate laptop.

    >>

    1. Stop the Volume Shadow Copy service (VSS) (which prompt an error message when I tried to install the client)
    2. Install Juniper Client and ignore the error messages about the virtual adapter

    3. Restart your PC
    4. If Microsoft IKE and IPSec services are running, stop them
    5. Import you Security Policy
    6. Startup the Service SafeNet IKE Service
    7. Connect to your network


    Sunday, August 14, 2011 3:11 PM