Netgear SRX5308 SRX5308 Reference Manual - Page 158

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual 9. Enter the settings as explained in Table 5-6. Table 5-6. Security Policy Editor: Security Policy Settings Setting Description (or Subfield and Description) Select Phase 1 Negotiation Select the Aggressive Mode radio button. Mode Enable Perfect Forward Secrecy (PFS) Select the Enable Perfect Forward Secrecy (PFS) check box. From the drop-down list below, select Diffie-Hellman Group 2. Enable Replay Detection Leave the default setting, which is selection of the Enable Replay Detection check box. 10. Click the disk icon to save the configuration, or select File > Save from the Security Policy Editor menu. 11. Close the VPN ProSafe VPN client. Note: You do not need to open or change the settings on the Authentication (Phase 1) screen or its accompanying Proposal 1 and Proposal 2 screens, nor on the Key Exchange (Phase 2) screen or its accompanying Proposal 1 screen. Leave the default settings for these screens. Testing the Connections and Viewing Status Information Both the NETGEAR ProSafe VPN Client and the VPN firewall provide VPN connection and status information. This information is useful for verifying the status of a connection and troubleshooting problems with a connection. Testing the VPN Connection To test a client connection and view the status and log information, follow these steps. To test the client connection, from your PC, right-click the VPN client icon in your Windows toolbar, and then select the VPN connection that you want to test. In the example that is shown in Figure 5-15 on page 5-17, select Connect... > My Connections\MainOffice. 5-16 Virtual Private Networking Using IPsec Connections v1.0, April 2010