Related Topics

About the Shrew Soft VPN Client

You can use the Shrew Soft VPN Client for Windows to enable your users to make a secure connection from a remote computer to your network. The Shrew Soft VPN Client functions similarly to the WatchGuard IPSec Mobile VPN Client and shares many of the same configuration settings, but it does have some limitations.

You can download the Shrew Soft VPN Client for Windows directly from the Software Downloads section of the WatchGuard website, or from Shrew Soft ( The Shrew Soft VPN client is supported on WatchGuard Fireboxes that run Fireware XTM v11.4.1 or higher.

SHA2 authentication and encryption options require Shrew Soft VPN Client v2.2.1 or higher.

Shrew Soft VPN Client Limitations

The Shrew Soft VPN Client does not support these Mobile VPN with IPSec configuration settings and features:

Feature Details
IKE keep-alive Not supported
Configuration of multiple VPN gateways for multi-WAN failover Not supported
Line management configuration settings Connection mode and Inactivity timeout Not supported
Phase 2 proposal Force Key Expiration setting kilobytes Does not apply to the Shrew Soft VPN client.
Dead Peer Detection (DPD) configuration settings: Traffic idle timeout and Max retries

Do not apply to the Shrew Soft VPN client.

If DPD is enabled, the Shrew Soft VPN client supports DPD with a traffic idle timeout value of 15 seconds.

RADIUS 2-factor authentication Not supported
SecurID 2-factor authentication Not supported
Read-only profile Not supported
User name and password stored for user authentication

Not supported

Users must type their user names and passwords each time they connect.

Shrew Soft VPN End-User Profile

The Shrew Soft VPN end-user profile is generated as a .vpn file that is not encrypted. We recommend that you use a secure method to distribute this file.

See Also

Install the Shrew Soft VPN Client Software

Use the Shrew Soft VPN Client to Connect

Give Us Feedback     Get Support     All Product Documentation     Technical Search