Secure vpn terminated by client reason 414 - Cisco ASA 5505 Firewall

Hi there! Thank you a lot! I had the same issue at work. I could not solve that problem for a long time. I usually use a VPN at Home but there are also several reasons to use it at work as well. I would like all the data I share with clients to be secured. I also recommend everyone to take a close look at this problem!

It could be a missing route... are the file server and email server on the same subnet? If they are then it is possibly not a routing issue.

Also it would be worth checking the tunneling settings for the VPNs... if you have specifed either only the fileserver subnet or specifically the file server address, then this could be the reason they can get to nothing else.

Hope that this has helped a little :)

you are trying to connect to the VPN client.
Which VPN software you are using ?
To connect to the VPN , you will need to trigger ports on the router.
open the set up page of the router and trigger the ports on the router. The port numbers will be. 1723 , 10000-20000 , 443-447 , 500. Also reduce the MTU settings to 1365.
Disable the Block Internet request, you will find this option under security tab.
Make sure that the firmware of the router is up to date.

Click here for more information about router and network

The default VPN policy rules prevent LAN access, also known as split-tunneling, since this creates a security risk (the ability of the VPN session to be hijacked or compromised through a covert channel).

If you are not the system admin, you need to talk to your system admin. If you are the system admin, then you need to review the documentation with respect to

http://www.sonicwall.com/us/support/kb.asp?kbsk=policy+allow+lan

VPN error that says "secure VPN Connection Terminated by Peer. Reason 427: Unknown error occured at peer. " This error occur about 30 sec to 1 min after connection has been made. My users are not letting the system sit idle. What could be causing the problem I am using VPN Client 4.6.

Accessing a VPN through a BGAN should be fairly simple. It sounds like some of the settings for the VPN might have changed. If you changed any settings on your computer, or if you have added any type of security settings or firewall. If you need any assistance with your BGAN let us know. We do sales of Satellite internet terminals such as Thrane & Thrane, Wideye Sabre, Hughes, Fleet Broadband, and much more. We also do repair of Broadband satellite terminals. You can visit our website at www.BlueCosmo.com, or call us at 877-258-3496.

You can download the MU VPN client at www.watchguard.com/support

For instructions on how to install and set it up, this document should be helpful http://www.watchguard.com/help/docs/v50SOHOMUVPNGuide.pdf

Goodluck!

If your cisco vpn client is behind the natted device then you need to allow nat traversal in the head office firewall and if you connect the vpn client through data card it will connect,

You'll want to enable the VPN transparency. In the router's administrative web interface, click the Security Tab, then the VPN Passthrough sub-tab. Cisco VPN's usually use IPSEC, so enable the IPSEC Pass-through and click "Save Settings". If this doesn't work enable the PPTP Pass-through as well and give that a shot.

Resolutions: 1) if you have firewall, open TCP Port 1723, IP Protocol 47 (GRE). 2) make sure you can reach the VPN server by using ping. Sometimes, poor connection can cause this issue too. 3) You may need to updated firmware on a router or firewall if other OS (win9x/nt/me/w2k) works except XP. 4) The VPN server may not be able to get IP from DHCP for the VPN client. So, you may want to re-configure VPN host networking settings. For XP pro VPN host, go to the Properties of the VPN>Network, check Specify TCP/IP address and Allow calling computer to specify its own IP address, and uncheck Assign TCP/IP addresses automatically using DHCP. 5) Make sure no other secure software blocks your access, for example, if you use Norton secure software, you may need to add the remote client's IP so that the client can access. 6) If your VPN running on a Windows RRAS with NAT enabled, you may want to check the NAT settings. 7) If you can establish the VPN from the desktop at home but not from the laptop. Make sure no security software like Microsoft OneCare software that blocks the GRE.