Issue:
The Proxicast VPN Client for Windows can make a VPN connection to a LAN-Cell from a home or mobile Internet connection, but not when installed on a PC on a corporate network.

Resolution:
When using the Proxicast VPN Client behind a corporate firewall/router you may need to enable the NAT-Traversal (NAT-T) feature of the VPN to handle the network address translation that the corporate router is performing on all traffic.

• On the LAN-Cell, go to the VPN Config menu, then select the Gateway Policy you want to edit (first row of the VPN rule pair).

• Check the NAT-Traversal checkbox near the top of the screen and click Apply to save the change

• On the VPN Client for Windows, NAT-T is set to Automatic by default. You can confirm this setting by selecting the Phase 1 policy and the clicking the "P1 Advanced" button.

Beyond NAT-T, the corporate firewall must enable traffic on the standard VPN ports: UDP-500 for IKE, UDP-4500 for NAT-T as well as permitting ESP traffic for the IPSec Tunnel itself. Most firewalls permit these outbound connections by default.