Application Name: SonicWALL Global VPN Client Application Version: 3.1.0.556 IPsec Driver Name: RCFOX IPSec Driver IPsec Driver Version: 10.0.1.147 Virtual Adapter Driver Name: SonicWALL VPN Adapter Virtual Adapter Driver Version: 9.01 DNE Adapter Driver Name: Deterministic Network Enhancer DNE Adapter Driver Version: 3.05.6.11238 Reported Generated At: 20:33:27 Mon Jul 20 2009 GMT System Summary OS Name: Microsoft Windows XP System Name: 5.1.2600 Service Pack 3 Build 2600 OS Manufacturer: Microsoft Corporation System Name: ARMADA System Manufacturer: ARMADA System Model: ARMADA System Type: X86-based PC Processor: x86 Family 6 Model 15 Stepping 13 GenuineIntel ~1995 Mhz BIOS Version: 06/23/99 Windows Directory: C:\WINDOWS Locale: United States Time Zone: Pacific Daylight Time Total Physical Memory: 1023 MB Available Physical Memory: 511 MB Total Virtual Memory: 2047 MB Available Virtual Memory: 1973 MB Page File Space: 2450 MB Windows IP Configuration Host Name . . . . . . . . . . . . : ARMADA Primary Dns Suffix . . . . . . . : Node Type . . . . . . . . . . . . : Hybrid IP Routing Enabled . . . . . . . : No WINS Proxy Enabled . . . . . . . : No DNS Suffix Search List . . . . . : Ethernet adapter {2B0A3CB4-B9D3-4D0C-894F-381DD154476E}: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Intel(R) PRO/1000 T Server Adapter Physical Address. . . . . . . . . : 08-00-27-1D-25-2D MTU . . . . . . . . . . . . . . . : 1500 Dhcp Enabled. . . . . . . . . . . : Yes Autoconfiguration Enabled . . . . : Yes IP Address. . . . . . . . . . . . : 10.0.2.15 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 10.0.2.2 DHCP Server . . . . . . . . . . . : 10.0.2.2 DNS Servers . . . . . . . . . . . : 205.171.3.65 205.171.2.65 Lease Obtained. . . . . . . . . . : Monday, July 20, 2009 05:30:10 PM Lease Expires . . . . . . . . . . : Tuesday, July 21, 2009 05:30:10 PM Ethernet adapter {86247B2A-1B78-4B46-B8E8-76794B1E960C}: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : SonicWALL VPN Adapter Physical Address. . . . . . . . . : 00-60-73-E7-6B-93 MTU . . . . . . . . . . . . . . . : 1418 Dhcp Enabled. . . . . . . . . . . : Yes Autoconfiguration Enabled . . . . : No IP Address. . . . . . . . . . . . : 10.28.63.149 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : DHCP Server . . . . . . . . . . . : 10.28.63.250 Lease Obtained. . . . . . . . . . : Monday, July 20, 2009 08:32:55 PM Lease Expires . . . . . . . . . . : Tuesday, January 19, 2038 03:14:07 AM =========================================================================== Interface List: Interface MAC Address Description 0x00000001 00-00-00-00-00-00 MS TCP Loopback interface 0x00000002 08-00-27-1D-25-2D Intel(R) PRO/1000 T Server Adapter - Packet Scheduler Miniport 0x00000003 00-60-73-E7-6B-93 SonicWALL VPN Adapter - Packet Scheduler Miniport =========================================================================== =========================================================================== Active Routes: Network Destination Netmask Gateway Interface Metric 0.0.0.0 0.0.0.0 10.0.2.2 10.0.2.15 10 10.0.2.0 255.255.255.0 10.0.2.15 10.0.2.15 10 10.0.2.15 255.255.255.255 127.0.0.1 127.0.0.1 10 10.28.59.0 255.255.255.0 10.28.63.149 10.28.63.149 1 10.28.60.0 255.255.255.0 10.28.63.149 10.28.63.149 1 10.28.63.0 255.255.255.0 10.28.63.149 10.28.63.149 30 10.28.63.149 255.255.255.255 127.0.0.1 127.0.0.1 30 10.28.65.0 255.255.255.0 10.28.63.149 10.28.63.149 1 10.28.67.0 255.255.255.0 10.28.63.149 10.28.63.149 1 10.255.255.255 255.255.255.255 10.0.2.15 10.0.2.15 10 10.255.255.255 255.255.255.255 10.28.63.149 10.28.63.149 30 65.126.53.67 255.255.255.255 10.0.2.2 10.0.2.15 1 127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1 149.179.0.0 255.255.0.0 10.28.63.149 10.28.63.149 1 149.183.27.0 255.255.255.0 10.28.63.149 10.28.63.149 1 149.183.164.0 255.255.255.0 10.28.63.149 10.28.63.149 1 172.20.58.0 255.255.255.0 10.28.63.149 10.28.63.149 1 192.168.27.0 255.255.255.0 10.28.63.149 10.28.63.149 1 224.0.0.0 240.0.0.0 10.0.2.15 10.0.2.15 10 224.0.0.0 240.0.0.0 10.28.63.149 10.28.63.149 30 255.255.255.255 255.255.255.255 10.0.2.15 10.0.2.15 1 255.255.255.255 255.255.255.255 10.28.63.149 10.28.63.149 1 Default Gateway: 10.0.2.2 =========================================================================== =========================================================================== ARP Table Entries: Internet Address Physical Address Interface Type 10.0.2.2 52-54-00-12-35-02 10.0.2.15 3 10.28.59.82 52-54-00-12-35-02 10.28.63.149 3 10.28.59.85 52-54-00-12-35-02 10.28.63.149 3 =========================================================================== *** Connections *** zPCN (192.168.27.50): Disabled Destination Networks -------------------- 10.28.59.0/255.255.255.0/BOOTPS: Idle 10.28.60.0/255.255.255.0/Any: Idle 10.28.59.0/255.255.255.0/Any: Idle Renton (65.126.53.67): Configuration Complete Destination Networks -------------------- 10.28.59.0/255.255.255.0/BOOTPS: Phase 2 Complete 192.168.27.0/255.255.255.0/Any: Idle 172.20.58.0/255.255.255.0/Any: Idle 149.183.164.0/255.255.255.0/Any: Idle 149.183.27.0/255.255.255.0/Any: Idle 149.179.0.0/255.255.0.0/Any: Idle 10.28.67.0/255.255.255.0/Any: Idle 10.28.65.0/255.255.255.0/Any: Idle 10.28.63.0/255.255.255.0/Any: Idle 10.28.60.0/255.255.255.0/Any: Idle 10.28.59.0/255.255.255.0/Any: Idle Negotiated Phase 1 SA Parameters -------------------------------- Encryption Algorithm: DES-CBC Hash Algorithm: MD5 Authentication Method: XAuth Initiator with Pre-shared key DH Group: Default 768-bit MODP group (Group 1) Connect Time: Monday July 20 2009 01:32:45 PM Duration: 36000 seconds Expiration Time: Tuesday, July 21, 2009 06:32:45 AM Negotiated Phase 2 SA Parameters -------------------------------- IPSec Protocol: Encapsulating Security Payload ESP Enc Algorithm: DES-CBC ESP Auth Algorithm: MD5 Encapsulation Mode: UDP Encapsulation Tunnel Diffie-Hellman Group: N/A (PFS not enabled) Tacoma (207.109.65.237): Disabled Destination Networks -------------------- 10.28.59.0/255.255.255.0/BOOTPS: Idle 194.10.26.0/255.255.255.0/Any: Idle 194.10.25.0/255.255.255.0/Any: Idle 192.168.27.0/255.255.255.0/Any: Idle 172.20.58.0/255.255.255.0/Any: Idle 149.183.27.0/255.255.255.0/Any: Idle 149.179.0.0/255.255.0.0/Any: Idle 129.230.0.0/255.255.0.0/Any: Idle 10.28.65.0/255.255.255.0/Any: Idle 10.28.64.0/255.255.255.0/Any: Idle 10.28.63.0/255.255.255.0/Any: Idle 10.28.62.0/255.255.255.0/Any: Idle 10.28.61.0/255.255.255.0/Any: Idle 10.28.60.0/255.255.255.0/Any: Idle 10.28.59.0/255.255.255.0/Any: Idle *** SECURITY POLICY DATABASE *** UID From MAC From IP To IP 1 To IP 2 FPort TPort Prot IPolicy ISADBUID OPolicy OSADBUID Peer IP Peer MAC FOMF FIMF TOMF TIMF Event ID --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 00000029 00:60:73:E7:6B:93 000.000.000.000 000.000.000.000 000.000.000.000 BOOTPC BOOTPS UDP Inspect 00000003 Secure 00000004 065.126.053.067 525400123502 00000032 00000034 00000038 00000032 00000308 00000028 00:00:00:00:00:00 000.000.000.000 000.000.000.000 000.000.000.000 BOOTPC BOOTPS UDP Inspect 00000000 Bypass 00000000 000.000.000.000 000000000000 00000030 00000030 00000030 00000030 00000000 00000026 00:00:00:00:00:00 000.000.000.000 000.000.000.000 000.000.000.000 Any ISAFLT UDP Inspect 00000000 Inspect 00000000 000.000.000.000 000000000000 00000000 00000000 00000030 00000030 00000000 00000025 08:00:27:1D:25:2D 000.000.000.000 000.000.000.000 000.000.000.000 Any ISAKMP UDP Inspect 00000000 Inspect 00000000 065.126.053.067 525400123500 00000000 00000000 00000030 00000030 00000000 00000027 08:00:27:1D:25:2D 000.000.000.000 000.000.000.000 000.000.000.000 Any Discar UDP Bypass 00000000 Inspect 00000000 000.000.000.000 000000000000 00000000 00000000 00000030 00000030 00000000 00000041 08:00:27:1D:25:2D 010.000.002.015 065.126.053.067 000.000.000.000 Any Any ESP Discard 00000000 Bypass 00000000 000.000.000.000 000000000000 00000014 00000014 00000014 00000014 00000000 00000032 00:60:73:E7:6B:93 010.028.063.149 149.183.164.000 255.255.255.000 Any Any N/A Bypass 00000003 Secure 00000004 065.126.053.067 525400123502 00000004 00000004 0000000C 00000004 00000308 00000035 00:60:73:E7:6B:93 010.028.063.149 010.028.067.000 255.255.255.000 Any Any N/A Bypass 00000003 Secure 00000004 065.126.053.067 525400123502 00000004 00000004 0000000C 00000004 00000308 00000036 00:60:73:E7:6B:93 010.028.063.149 010.028.065.000 255.255.255.000 Any Any N/A Bypass 00000003 Secure 00000004 065.126.053.067 525400123502 00000004 00000004 0000000C 00000004 00000308 00000037 00:60:73:E7:6B:93 010.028.063.149 010.028.063.000 255.255.255.000 Any Any N/A Bypass 00000003 Secure 00000004 065.126.053.067 525400123502 00000004 00000004 0000000C 00000004 00000308 00000038 00:60:73:E7:6B:93 010.028.063.149 010.028.060.000 255.255.255.000 Any Any N/A Bypass 00000003 Secure 00000004 065.126.053.067 525400123502 00000004 00000004 0000000C 00000004 00000308 00000039 00:60:73:E7:6B:93 010.028.063.149 010.028.059.000 255.255.255.000 Any Any N/A Bypass 00000003 Secure 00000004 065.126.053.067 525400123502 00000004 00000004 0000000C 00000004 00000308 00000031 00:60:73:E7:6B:93 010.028.063.149 172.020.058.000 255.255.255.000 Any Any N/A Bypass 00000003 Secure 00000004 065.126.053.067 525400123502 00000004 00000004 0000000C 00000004 00000308 00000033 00:60:73:E7:6B:93 010.028.063.149 149.183.027.000 255.255.255.000 Any Any N/A Bypass 00000003 Secure 00000004 065.126.053.067 525400123502 00000004 00000004 0000000C 00000004 00000308 00000030 00:60:73:E7:6B:93 010.028.063.149 192.168.027.000 255.255.255.000 Any Any N/A Bypass 00000003 Secure 00000004 065.126.053.067 525400123502 00000004 00000004 0000000C 00000004 00000308 00000034 00:60:73:E7:6B:93 010.028.063.149 149.179.000.000 255.255.000.000 Any Any N/A Bypass 00000003 Secure 00000004 065.126.053.067 525400123502 00000004 00000004 0000000C 00000004 00000308 00000040 00:00:00:00:00:00 000.000.000.000 000.000.000.000 000.000.000.000 Any Any N/A Bypass 00000000 Bypass 00000000 000.000.000.000 000000000000 00000000 00000000 00000000 00000000 00000000 00000024 08:00:27:1D:25:2D 000.000.000.000 000.000.000.000 000.000.000.000 Any Any N/A Bypass 00000000 Bypass 00000000 000.000.000.000 000000000000 00000000 00000000 00000000 00000000 00000000 *** LOG MESSAGES *** 2009/07/20 13:31:46:194 Information Reading configuration file C:\Documents and Settings\dispatch\Application Data\SonicWALL\SonicWALL Global VPN Client\SonicWALL Global VPN Client.rcf. 2009/07/20 13:31:46:555 Information Saving configuration file C:\Documents and Settings\dispatch\Application Data\SonicWALL\SonicWALL Global VPN Client\SonicWALL Global VPN Client.rcf. 2009/07/20 13:31:46:565 Information The configuration file 'C:\Documents and Settings\dispatch\Application Data\SonicWALL\SonicWALL Global VPN Client\SonicWALL Global VPN Client.rcf' has been saved. 2009/07/20 13:31:46:685 Information SonicWALL Global VPN Client version 3.1.0.556 2009/07/20 13:32:44:668 Information The connection "Renton" has been enabled. 2009/07/20 13:32:45:179 Information 65.126.53.67 Starting ISAKMP phase 1 negotiation. 2009/07/20 13:32:45:279 Information An incoming ISAKMP packet from 10.0.2.2 was ignored. 2009/07/20 13:32:53:281 Information 65.126.53.67 Starting aggressive mode phase 1 exchange. 2009/07/20 13:32:53:281 Information 65.126.53.67 NAT Detected: Local host is behind a NAT device. 2009/07/20 13:32:53:291 Information 65.126.53.67 The SA lifetime for phase 1 is 36000 seconds. 2009/07/20 13:32:53:291 Information 65.126.53.67 Phase 1 has completed. 2009/07/20 13:32:53:311 Information 65.126.53.67 Received XAuth request. 2009/07/20 13:32:53:311 Information 65.126.53.67 Sending XAuth reply. 2009/07/20 13:32:53:321 Information 65.126.53.67 Received XAuth status. 2009/07/20 13:32:53:321 Information 65.126.53.67 Sending XAuth acknowledgement. 2009/07/20 13:32:53:321 Information 65.126.53.67 User authentication has succeeded. 2009/07/20 13:32:53:341 Information 65.126.53.67 Received request for policy version. 2009/07/20 13:32:53:341 Information 65.126.53.67 Sending policy version reply. 2009/07/20 13:32:53:351 Information 65.126.53.67 Received policy change is not required. 2009/07/20 13:32:53:361 Information 65.126.53.67 Sending policy acknowledgement. 2009/07/20 13:32:53:361 Information 65.126.53.67 The configuration for the connection is up to date. 2009/07/20 13:32:53:461 Information 65.126.53.67 Starting ISAKMP phase 2 negotiation with 10.28.59.0/255.255.255.0:BOOTPC:BOOTPS:UDP. 2009/07/20 13:32:53:461 Information 65.126.53.67 Starting quick mode phase 2 exchange. 2009/07/20 13:32:53:491 Information 65.126.53.67 The SA lifetime for phase 2 is 36000 seconds. 2009/07/20 13:32:53:491 Information 65.126.53.67 Phase 2 with 10.28.59.0/255.255.255.0:BOOTPC:BOOTPS:UDP has completed. 2009/07/20 13:32:53:491 Information Renewing IP address for the virtual interface (00-60-73-E7-6B-93). 2009/07/20 13:33:00:280 Information The IP address for the virtual interface has changed to 10.28.63.149. 2009/07/20 13:33:00:370 Information The system ARP cache has been flushed. 2009/07/20 13:33:00:420 Information 65.126.53.67 NetWkstaUserGetInfo failed: The Workstation service has not been started. 2009/07/20 13:33:00:430 Warning 65.126.53.67 Failed to locate primary domain controller. 2009/07/20 13:33:11:256 Warning Failed to receive an incoming ISAKMP packet. The length is incorrect. 2009/07/20 13:33:13:509 Warning Failed to receive an incoming ISAKMP packet. The length is incorrect.