Can't get DDNS Certificate to work with SecuExtender VPN Client

PeterUK
PeterUK Posts: 3,736  Guru Member
100 Answers 2500 Comments Friend Collector Seventh Anniversary

USG FLEX 200 V5.37(ABUI.2)

SecuExtender VPN Client_IPSec_SSL_VPN_7.7.40.019

I have a Certificate for something.ddns.net and for testing point at 192.168.255.237 logs show it built but then disconnects

Screenshot 2024-04-07 231944.png

But if I make a self-signed Certificate it works

If I drop the encryption for windows default that can be changed

Phase 1 3DES/SHA1 DH2

Phase 2 AES256/SHA1 PFS none

Import my something.ddns.net Certificate setup too windows VPN built in Client that works so why can't the SecuExtender VPN Client_IPSec? I think Its got something to do with intermediate Certification authorities that the SecuExtender VPN Client does not have? I tried exporting that to SecuExtender VPN Client but it didn't work.

Screenshot 2024-04-07 234654.png

All Replies

  • Zyxel_Jeff
    Zyxel_Jeff Posts: 1,316  Zyxel Employee
    100 Answers 500 Comments Friend Collector Fourth Anniversary

    Hi @PeterUK

    Thank you for reporting this case to us. Could you please send me the certificate with the DDNS domain name via private message? We want to check the certificate content. Thanks.