"3DES" = "3DES";
"A reasonable value would be 1280. Lower the value if you're experiencing hanging data transfers. Increase the value to maximize throughput." = "A reasonable value would be 1280. Lower the value if you're experiencing hanging data transfers. Increase the value to maximize throughput.";
"Additional Settings" = "Additional Settings";
"AddressPlaceholder" = "Address or Network";
"Advertise as Dead Peer Detection capable" = "Advertise as Dead Peer Detection (DPD) capable";
"AES 128 GCM" = "AES-GCM-128";
"AES 128" = "AES-128";
"AES 192 GCM" = "AES-GCM-192";
"AES 192" = "AES-192";
"AES 256 GCM" = "AES-GCM-256";
"AES 256" = "AES-256";
"aggressive" = "Aggressive Mode";
"Allow automatic downgrade to weaker DH groups (reduced security)" = "Allow automatic downgrade to weaker DH groups (reduced security)";
"allowDHGroupFallbackHelp_Title" = "Automatic DH Group Fallback";
"allowDHGroupFallbackHelp" = "If a connection cannot be established using the selected DH group and that group is considered strong (DH group 14 or higher), VPN Tracker will automatically retry the connection using a weaker DH group. Many older devices expect DH group 2, which was the default for many years. This may reduce security.\n\nConversely, if DH group 2 is selected and the connection attempt fails, VPN Tracker will retry using DH group 14, as many newer devices no longer accept DH group 2 and DH group 14 is widely supported. Therefore, this option does not necessarily reduce security, but it does permit fallback to weaker security when required.";
"Always exempt the addresses below from VPN" = "Always exempt the addresses below from VPN";
"Always exempt these addresses from VPN:" = "Always exempt these addresses from VPN:";
"Always prompt for pre-shared key" = "Always prompt for pre-shared key";
"Always prompt for shared secret" = "Always prompt for shared secret";
"Always prompt for user credentials" = "Always prompt for user credentials";
"Always prompt for XAUTH credentials" = "Always prompt for XAUTH credentials";
"alwaysShowPSKDialogHelp_Title" = "Always prompt for pre-shared key";
"alwaysShowPSKDialogHelp" = "If checked, VPN Tracker will always ask for the pre-shared key upon connecting, even if one is saved in the keychain.\n\nVPN Tracker will pre-fill the form using the saved pre-shared key, if available.";
"alwaysShowXAUTHDialogHelp_Title" = "Always prompt for XAUTH credentials";
"alwaysShowXAUTHDialogHelp" = "If checked, VPN Tracker will always ask for your XAUTH password upon connecting, even if a password is saved in the keychain.\n\nVPN Tracker will pre-fill the form using the saved XAUTH password, if available. This can be useful if your VPN gateway requires a constant PIN and a generated one-time passcode to be used as the XAUTH password.";
"AnyConnect::Tunnel Protocol Auto" = "Automatic (DTLS if available)";
"AnyConnect::Tunnel Protocol TLS" = "SSL VPN (TLS) only";
"AnyConnecttunnelProtocolHelp" = "\"Automatic\" uses DTLS when available for better performance and falls back to SSL VPN (TLS) if needed.\n\nSelect \"SSL VPN (TLS) only\" if DTLS does not work correctly or is blocked by your network.";
"as the application version during Mode Config" = "as the application version during Mode Config";
"Authentication Algorithm" = "Authentication algorithm";
"Autofill MAC Address" = "Use Current Router";
"automatic" = "Automatic";
"Blowfish" = "Blowfish";
"Bytes" = "Bytes";
"bytes" = "bytes";
"Cache user credentials until VPN is disconnected" = "Cache user credentials until VPN is disconnected";
"Cache XAUTH credentials until VPN is disconnected" = "Cache XAUTH credentials until VPN is disconnected";
"cacheXAUTHHelp_Title" = "Cache XAUTH credentials until VPN is disconnected";
"cacheXAUTHHelp" = "If checked, VPN Tracker will cache your user password for use during rekeying, even if it is not stored in the keychain.\n\nThis setting has no effect if your XAUTH password is stored in the keychain.";
"CAST 128" = "CAST 128";
"Certificates" = "Certificates";
"ChaCha20 Poly1305" = "ChaCha20 Poly1305";
"Cisco" = "Cisco";
"claim" = "Use remote proposals if more secure";
"Compression Algorithm" = "Compression Algorithm";
"Compression_Auto_In" = "On (Any)";
"Compression_LZ4" = "On (Prefer LZ4)";
"Compression_LZO" = "On (Prefer LZO)";
"Compression_Off" = "Off";
"Compression" = "Compression";
"CompressionFraming_Off" = "None";
"CompressionFraming_V1" = "Version 1 (V1)";
"CompressionFraming_V2" = "Version 2 (V2)";
"CompressionFraming" = "Compression Support";
"Connect timeout" = "Connection timeout";
"Connect Timeout" = "Connection Timeout";
"credentialDialogTimeoutHelp_Title" = "Credential Prompt Timeout";
"credentialDialogTimeoutHelp" = "Increase if you need more time to enter your pre-shared key and/or XAUTH password while connecting.\n\nPlease note that many VPN gateways expect passwords to be sent within 30-60 seconds.";
"Credentials" = "Credentials";
"Delete Payloads" = "Delete Payloads";
"DES IV32" = "DES IV32";
"DES IV64" = "DES IV64";
"DES" = "DES";
"Diffie-Hellman" = "Diffie-Hellman";
"disabled" = "Disabled";
"Disconnect if inactive for" = "Disconnect if inactive for";
"Display credentials prompt for" = "Display credentials prompt for";
"Display credentials prompt" = "Display credentials prompt for";
"DNS IP Version Preferrence" = "Connect using IPv4 or IPv6";
"DNS Lookup IPv Auto" = "Automatic";
"DNS Lookup IPv4 Only" = "Use IPv4";
"DNS Lookup IPv6 Only" = "Use IPv6";
"DNS Lookup Perfer IPv6" = "Prefer IPv6";
"DNS Lookup Prefer IPv4" = "Prefer IPv4";
"dnsLookupPreferredIPVersionHelp_Title" = "IP Version for DNS lookups";
"dnsLookupPreferredIPVersionHelp" = "If your VPN gateway has both IPv4 and IPv6 addresses, you can choose which of those VPN Tracker should use.";
"Enable PFS" = "Enable Perfect Forward Secrecy (PFS)";
"Encryption Algorithm" = "Encryption algorithm";
"Enforce NAT Traversal" = "Enforce NAT-Traversal";
"enforced" = "Enforced";
"Establish a single tunnel to 0.0.0.0/0 even for split-tunneling" = "Simulate Host to Network over a Host to Everywhere tunnel";
"Establish unique SAs for multiple networks" = "Establish a separate phase 2 tunnel for each remote network";
"exact" = "Never use remote proposals";
"Exchange mode" = "Exchange mode";
"Exchange Mode" = "Exchange Mode";
"exchangeModeHelp_1043" = "Select the Exchange Mode expected by your SonicWall.\n\nMost SonicWalls only support Aggressive Mode for connections to their GroupVPN.";
"exchangeModeHelp_1049" = "Select the Exchange Mode expected by your SonicWall.\n\nMost SonicWalls only support Aggressive Mode for connections to their GroupVPN.";
"exchangeModeHelp_105" = "Select the Exchange Mode expected by your SonicWall.\n\nMost SonicWalls only support Aggressive Mode for connections to their GroupVPN.";
"exchangeModeHelp_125" = "Select the Exchange Mode expected by your SonicWall.\n\nMost SonicWalls only support Aggressive Mode for connections to their GroupVPN.";
"exchangeModeHelp_Title" = "Exchange Mode";
"exchangeModeHelp" = "Select the Exchange Mode expected by your VPN gateway.\n\nAggressive Mode is the appropriate mode for clients connecting from dynamic IP addresses and from behind NAT routers.\n\nMain Mode is considered more secure but many VPN gateways do not support it for clients connecting from dynamic IP address or from behind NAT routers.";
"Exclusive Padding Tail" = "Exclusive padding tail";
"Fields will be pre-filled with credentials from the keychain." = "Fields will be pre-filled with credentials from the keychain.";
"Force traffic over the VPN" = "Force traffic over the VPN if remote networks conflict with local networks";
"forceLocalTrafficOverVPNHelp_Title" = "Force Traffic Over VPN";
"forceLocalTrafficOverVPNHelp" = "If the local network(s) and the remote network(s) of the VPN overlap, VPN Tracker can attempt to force traffic over the VPN.\n\nTo minimize the impact on your Mac's network connection, the local router (default gateway), DHCP, and DNS server(s) will be exempt. Hosts using these IP addresseses cannot be reached over the VPN.";
"General" = "General";
"Group 1 (768 bit)" = "Group 1 (768 bit)";
"Group 1" = "DH Group 1 (768 bit)";
"Group 14 (2048 bit)" = "Group 14 (2048 bit)";
"Group 14" = "DH Group 14 (2048 bit)";
"Group 15 (3072 bit)" = "Group 15 (3072 bit)";
"Group 15" = "DH Group 15 (3072 bit)";
"Group 16 (4096 bit)" = "Group 16 (4096 bit)";
"Group 16" = "DH Group 16 (4096 bit)";
"Group 17 (6144 bit)" = "Group 17 (6144 bit)";
"Group 17" = "DH Group 17 (6144 bit)";
"Group 18 (8192 bit)" = "Group 18 (8192 bit)";
"Group 18" = "DH Group 18 (8192 bit)";
"Group 19 (256 bit Random ECP)" = "Group 19 (256 bit Random ECP)";
"Group 19" = "DH Group 19 (256 bit Random ECP)";
"Group 2 (1024 bit)" = "Group 2 (1024 bit)";
"Group 2" = "DH Group 2 (1024 bit)";
"Group 20 (384 bit Random ECP)" = "Group 20 (384 bit Random ECP)";
"Group 20" = "DH Group 20 (384 bit Random ECP)";
"Group 21 (521 bit Random ECP)" = "Group 21 (521 bit Random ECP)";
"Group 21" = "DH Group 21 (521 bit Random ECP)";
"Group 28 (Brainpool P256r1)" = "Group 28 (Brainpool P256r1)";
"Group 28" = "DH Group 28 (Brainpool P256r1)";
"Group 29 (Brainpool P384r1)" = "Group 29 (Brainpool P384r1)";
"Group 29" = "DH Group 29 (Brainpool P384r1)";
"Group 30 (Brainpool P512r1)" = "Group 30 (Brainpool P512r1)";
"Group 30" = "DH Group 30 (Brainpool P521r1)";
"Group 31 (Curve25519)" = "Group 31 (Curve25519)";
"Group 31" = "DH Group 18 (Curve25519)";
"Group 32 (Curve448)" = "Group 32 (Curve448)";
"Group 32" = "DH Group 18 (Curve448)";
"Group 5 (1536 bit)" = "Group 5 (1536 bit)";
"Group 5" = "DH Group 5 (1536 bit)";
"Hash Algorithm" = "Hash algorithm";
"Help" = "Help";
"HMAC MD5" = "HMAC MD5";
"HMAC SHA1" = "HMAC SHA-1";
"HMAC SHA2 (256)" = "HMAC SHA-256";
"HMAC SHA2 (384)" = "HMAC SHA-384";
"HMAC SHA2 (512)" = "HMAC SHA-512";
"IKEv1::Always prompt for shared secret" = "Always prompt for pre-shared key";
"IKEv1::Always prompt for user credentials" = "Always prompt for XAUTH credentials";
"IKEv1::alwaysShowPSKDialogHelp_Title" = "Always prompt for pre-shared key";
"IKEv1::alwaysShowPSKDialogHelp" = "If checked, VPN Tracker will always ask for the pre-shared key upon connecting, even if one is saved in the keychain.\n\nVPN Tracker will pre-fill the form using the saved pre-shared key, if available.";
"IKEv1::alwaysShowXAUTHDialogHelp_Title" = "Always prompt for XAUTH credentials";
"IKEv1::alwaysShowXAUTHDialogHelp" = "If checked, VPN Tracker will always ask for your XAUTH password upon connecting, even if a password is saved in the keychain.\n\nVPN Tracker will pre-fill the form using the saved XAUTH password, if available. This can be useful if your VPN gateway requires a constant password and a generated one-time passcode to be combined to form the XAUTH password.";
"IKEv1::Cache user credentials until VPN is disconnected" = "Cache XAUTH credentials until VPN is disconnected";
"IKEv1::cacheXAUTHHelp_Title" = "Cache XAUTH credentials until VPN is disconnected";
"IKEv1::cacheXAUTHHelp" = "If checked, VPN Tracker will cache your XAUTH password for use during rekeying, even if it is not stored in the keychain.\n\nThis setting has no effect if your XAUTH password is stored in the keychain.";
"IKEv1::Phase 1 Proposal" = "Phase 1 (IKE)";
"IKEv1::Phase 2 Proposal" = "Phase 2 (IPsec)";
"Important: If you select this option, some devices may disconnect other VPN users." = "     Important: If you select this option, some devices may disconnect other VPN users.";
"Important: You should not turn off this option except for debugging purposes." = "     Important: You should not turn off this option except for debugging purposes.";
"Interoperability" = "Interoperability";
"Interval" = "Interval";
"IPv6" = "IPv6";
"keepAliveEnabledHelp_Title" = "Keep Connection Alive with Ping Packets";
"keepAliveEnabledHelp" = "If there is no outgoing traffic for the given amount of time, ping packets are generated and sent to make sure all stateful firewalls and NAT routers in-between consider the connection as still being alive.";
"KEYSET_LOCAL_0_REMOTE_0" = "Both ０";
"KEYSET_LOCAL_0_REMOTE_1" = "Local ０ ↔  Remote 1";
"KEYSET_LOCAL_1_REMOTE_0" = "Local １ ↔  Remote ０";
"Lifetime" = "Lifetime";
"LZ4_V2" = "LZ4 (V2)";
"LZ4" = "LZ4";
"LZO" = "LZO";
"MAC Address" = "MAC Address of Remote Network's Router";
"main" = "Main Mode";
"Maximum Length" = "Maximum length";
"maxInactivityEnabledHelp_Title" = "Disconnect If Inactive";
"maxInactivityEnabledHelp" = "If there is no traffic for the given amount of time, the connection will be dropped.";
"MD5" = "MD5";
"modeConfigApplicationVersionHelp_Title" = "Mode Config Application Version";
"modeConfigApplicationVersionHelp" = "For better compatibility, VPN Tracker can identify as a different client.\n\nFor example, to identify as a Cisco VPN Client running on Linux, you could use “Cisco Systems VPN Client 4.8.0:Linux”.";
"modeConfigSendCiscoFirewallAttributeHelp_Title" = "Cisco Firewall Attribute";
"modeConfigSendCiscoFirewallAttributeHelp" = "If enabled, VPN Tracker will indicate to the VPN gateway that firewall software is installed (macOS has a firewall built into the system).";
"ModeSelector.Config" = "Configure";
"ModeSelector.Log" = "Log";
"ModeSelector.Status" = "Status";
"MTU size" = "MTU size";
"MTU" = "MTU";
"mtuSizeInBytesHelp_Title" = "MTU";
"mtuSizeInBytesHelp" = "The maximum transfer unit (MTU) for the VPN network interface. If unchecked, VPN Tracker will choose a suitable value.\n\nLower the value if you are experiencing hanging data transfers. Increase the value to maximize throughput. A reasonable value would be 1280.";
"NAT Traversal Ping Interval" = "Ping Interval";
"NAT Traversal" = "NAT-Traversal";
"NAT-Traversal" = "NAT-Traversal";
"nattModeHelp_Title" = "NAT-Traversal";
"nattModeHelp" = "VPN Tracker can automatically determine if your VPN gateway and your local router support NAT-Traversal. You should leave this setting on “Automatic” whenever possible.\n\nIf set to “Disabled”, VPN Tracker will not perform any NAT-Traversal. The connection will work only if the local router fully supports IPsec (ESP) Passthrough.\n\nIf set to “Enforced”, VPN Tracker will perform NAT-Traversal even if not behind Network Address Translation (NAT). The connection will work only if your VPN gateway fully supports NAT-Traversal.";
"Network Protocol" = "Network Protocol";
"No Authentication" = "No authentication";
"No Compression" = "No Compression";
"No Hash" = "No Hash";
"Nonce Size" = "Nonce size";
"nonceSizeHelp_Title" = "Nonce Size";
"nonceSizeHelp" = "The size of the nonce used for the Diffie-Hellman Key Exchange.\n\nThe default value is 16 bytes.";
"None" = "None";
"number of seconds" = "number of seconds";
"obey" = "Use remote proposals";
"Off" = "Off";
"OpenVPN Connect client compatibility mode" = "OpenVPN Connect client compatibility mode";
"OpenVPN::Perform active Dead Peer Detection every" = "Consider the peer dead if no sign of liveliness for";
"OpenVPN::performActiveDPDHelp_Title" = "Dead Peer Detection (DPD)";
"OpenVPN::Phase 1 Keyset IDs" = "Key Direction";
"OpenVPN::Phase 1 Proposal" = "Phase 1 (TLS)";
"OpenVPN::Phase 2 Keyset IDs" = "Secret Key IDs";
"OpenVPN::Phase 2 Proposal" = "Phase 2 (OpenVPN)";
"OpenVPN::seconds if necessary" = "seconds";
"OpenVPN::STUB" = "Controlled by Server (\"comp-lzo no\")";
"OpenVPN::STUB2" = "Controlled by Server (\"compress stub\")";
"OpenVPN::STUB3" = "Controlled by Server (\"compress stub-v2\")";
"OpenVPN:performActiveDPDHelp" = "If VPN Tracker doesn't see any indication that the gateway is still alive (online and responsive) for the configured amount of time, it will consider the gateway to be dead and the connection to be broken.\n\nUnlike inactivity, upload traffic will not prevent this from happening, as upload traffic is not proof that the gateway is still alive.\n\nNote: The time interval is not strictly enforced for TCP connections, and only for gateways configured to periodically send keep-alive pings when there is no traffic to send.";
"openVPNConnectCompatibilityHelp_Title" = "OpenVPN Connect Compatibility";
"openVPNConnectCompatibilityHelp" = "If enabled, VPN Tracker behaves more like the OpenVPN Connect client for better compatibility with OpenVPN Access Server and OpenVPN CloudConnexa.";
"Packet count" = "Packet count";
"Padding" = "Padding";
"paddingUseExclusiveTailHelp_Title" = "Exclusive Padding Tail";
"paddingUseExclusiveTailHelp" = "Determines whether to write the padding length (off) or the padding length minus 1 (on) into the last byte of the padding.\n\nThe IKE standard uses exclusive tail padding.";
"paddingUseRandomizeHelp_Title" = "Randomize Padding";
"paddingUseRandomizeHelp" = "Encrypted data often needs to be padded to fit certain data block sizes. This setting randomize contents of this padding.\n\nThe IKE standard does not randomize padding.";
"paddingUseRandomizeLengthHelp_Title" = "Randomize Padding Length";
"paddingUseRandomizeLengthHelp" = "Randomize the length of the padding.\n\nThe IKE standard does not randomize padding length.";
"paddingUseStrictCheckHelp_Title" = "Strict Padding Check";
"paddingUseStrictCheckHelp" = "Verifies that the last byte of the padding does indeed contain the correct length.";
"Perfect Forward Secrecy (PFS)" = "Perfect Forward Secrecy (PFS)";
"Perform active Dead Peer Detection every" = "Perform active Dead Peer Detection every";
"performActiveDPDHelp_Title" = "Active Dead Peer Detection (DPD)";
"performActiveDPDHelp" = "VPN Tracker will initiate DPD if the VPN gateway does not do so itself. If no response is received, the VPN will be considered unresponsive and VPN Tracker will attempt to reconnect.\n\nUncheck this option if VPN Tracker incorrectly determines your VPN gateway to be unresponsive. VPN Tracker will still respond to DPD packets, but won't initiate DPD itself or disconnect the VPN.";
"Phase 1 General" = "General";
"Phase 1 Keyset IDs (Static Key)" = "Secret File Key Direction";
"Phase 1 Keyset IDs (TLS Auth)" = "TLS-Auth Key Direction";
"Phase 1 Keyset IDs" = "Phase 1 Keyset IDs";
"Phase 1 Proposal" = "Phase 1 (IKE)";
"Phase 1 timeout" = "Phase 1 timeout";
"Phase 2 Keyset IDs" = "Phase 2 Keyset IDs";
"Phase 2 Proposal" = "Phase 2 (IPsec)";
"Phase 2 timeout" = "Phase 2 timeout";
"Phase 2" = "Phase 2";
"phase1AlgorithmsHelp_Title" = "Phase 1 Encryption and Hash Algorithms";
"phase1AlgorithmsHelp" = "The algorithms selected here need to match those configured on the VPN gateway for phase 1.\n\nVPN Tracker will propose all possible combinations of the selected encryption and hash algorithms to the VPN gateway, so if you are unsure, you may select multiple encryption and hash algorithms. However, due to possible packet fragmentation issues, it is not recommended to check more than five algorithms.";
"phase1DHGroupHelp_Title" = "Phase 1 Diffie-Hellman (DH) Group";
"phase1DHGroupHelp" = "The selected DH group must match the DH group configured on the VPN gateway for phase 1.\n\nHigher DH groups are considered more secure, but may also require additional computing power, in particular on the VPN gateway.";
"phase1LifetimeInSecondsHelp_Title" = "Phase 1 Lifetime";
"phase1LifetimeInSecondsHelp" = "The lifetime needs to match the lifetime configured on the VPN gateway for phase 1. When the lifetime expires, phase 1 is re-established with fresh encryption keys.";
"phase1ProposalCheckHelp_Title" = "Proposal conflict resolution";
"phase1ProposalCheckHelp" = "This setting determines what VPN Tracker will do if the VPN gateway propose a different lifetime or Perfect Forward Secrecy (PFS) setting.\n\n“Use remote proposals if more secure” is the recommended setting.";
"phase1SendCertificateHelp_Title" = "Send Certificate";
"phase1SendCertificateHelp" = "If checked, VPN Tracker will send your certificate to the remote VPN gateway, enabling it to verify the certificate. This option should normally be on.";
"phase1SendInitialContactHelp_Title" = "Send Initial-Contact Message";
"phase1SendInitialContactHelp" = "If enabled, VPN Tracker will indicate that it is establishing a fresh VPN connection, and ask the VPN gateway to clear out any VPN connections that haven't properly been disconnected.\n\nWhile this is usually a good idea, on some VPN gateways, this will terminate all VPN connections (even those from other users), or all connections originating from this (public) IP address, so use with caution! In particular, you should probably not enable this option if it is turned off by default in your selected device profile.";
"phase1SendRequestRemoteCertificateHelp_Title" = "Request Remote Certificate";
"phase1SendRequestRemoteCertificateHelp" = "If checked, VPN Tracker will request the VPN gateway to send its certificate so it can be verified by VPN Tracker even if it is not installed on your Mac. This option should normally be on.";
"phase1SendVendorIDCiscoUnityHelp_Title" = "Send Cisco Unity Vendor ID";
"phase1SendVendorIDCiscoUnityHelp" = "With this setting enabled, VPN Tracker will indicate to the VPN gateway that is able to handle certain Cisco-specific functionality. It is required for Cisco EasyVPN automatic configuration.\n\nSome other vendors also support this attribute to enable additional functionality during Mode Config.";
"phase1VerifyRemoteCertificateHelp_Title" = "Verify Remote Certificate";
"phase1VerifyRemoteCertificateHelp" = "If checked, VPN Tracker will verify the remote certificate in order to ensure that the VPN gateway is identifiying itself using a properly signed and valid certificate.\n\nYou should never uncheck this option unless for testing or debugging purposes in a controlled test environment.";
"phase2AlgorithmsHelp_Title" = "Phase 2 Encryption and Authentication Algorithms";
"phase2AlgorithmsHelp" = "The algorithms selected here need to match those configured on the VPN gateway for phase 2.\n\nVPN Tracker will propose all possible combinations of the selected encryption and authentication algorithms to the VPN gateway, so if you are unsure, you may select multiple encryption and hash algorithms. However, due to possible packet fragmentation issues, it is not recommended to check more than five algorithms.";
"phase2AlgorithmsHelpMulti_Title" = "Encryption and Authentication Algorithms";
"phase2AlgorithmsHelpMulti" = "The algorithms selected here need to match those configured on the VPN gateway.\n\nVPN Tracker will propose all possible combinations of the selected encryption and authentication algorithms to the VPN gateway, so if you are unsure, you may select multiple encryption and hash algorithms. However, due to possible packet fragmentation issues, it is not recommended to check more than five algorithms.";
"phase2AlgorithmsHelpSingle_Title" = "Encryption and Authentication Algorithms";
"phase2AlgorithmsHelpSingle" = "The algorithms selected here need to match those configured on the VPN gateway.";
"phase2CiscoStyleSharedSAHelp_Title" = "Simulate Host to Network over a Host to Everywhere tunnel";
"phase2CiscoStyleSharedSAHelp" = "If enabled, VPN Tracker will establish a Host to Everywhere tunnel (a tunnel to 0.0.0.0/0, suitable for all traffic), but it won’t tunnel all traffic over it, only traffic to the requested remote networks.\n\nThis setting should be enabled for most Cisco VPN gateways as that’s what these gateways usually expect, even when split-tunneling has been configured on the gateway.";
"phase2LifetimeInSecondsHelp_Title" = "Phase 2 Lifetime";
"phase2LifetimeInSecondsHelp" = "The lifetime needs to match the lifetime configured on the VPN gateway for phase 2. When the lifetime expires, phase 2 is re-established with fresh encryption keys.";
"phase2PFSHelp_Title" = "Phase 2 Perfect Forward Secrecy (PFS)";
"phase2PFSHelp" = "If Perfect Forward Secrecy is enabled on your VPN gateway, select its Diffie-Hellman (DH) group here. If your VPN gateway does not have a separate DH group setting for Perfect Forward Secrecy, it is likely using the same DH group as for phase 1.\n\nSelect “Off” if Perfect Forward Secrecy is not enabled on your VPN gateway.";
"phase2UniqueSAsHelp_Title" = "Establish a separate phase 2 tunnel for each remote network";
"phase2UniqueSAsHelp" = "For VPNs with multiple remote networks, VPN Tracker can either establish an individual phase 2 tunnel for each remote network, or send everything over a single phase 2 tunnel.\n\nFor most VPN gateways, this setting should be on. For Cisco devices, it should be off.\n\nIf you find that with this setting off you can establish the VPN, but only reach the first remote network, and with it off, you cannot establish the VPN at all, there is probably an issue with VPN access permissions on your VPN gateway.";
"Physical Remote Network(s)" = "Direct Link Detection";
"Prefer IPv6 VPN gateway address, if available" = "Prefer IPv6 VPN gateway address, if available";
"Prefer IPv6 VPN gateway address" = "Prefer IPv6 VPN gateway address";
"preferIPv6VPNGatewayAddressHelp_Title" = "Prefer IPv6 VPN gateway address";
"preferIPv6VPNGatewayAddressHelp" = "If enabled, the IPv6 address will be used if DNS returns both an IPv4 and an IPv6 address for the VPN gateway host name.";
"Prompt Timeout" = "Prompt Timeout";
"Proposal check" = "Proposal conflict resolution";
"Randomize Padding Length up to" = "Randomize padding length up to";
"Randomize Padding" = "Randomize padding";
"Randomize VPN Gateway address" = "Randomize VPN Gateway address";
"RC4 128" = "RC4-128";
"RC4 40" = "RC4-40";
"RC4 56" = "RC4-56";
"Reconnect if no sign of liveliness for" = "Reconnect if no activity for";
"Remote Network Identifiers" = "Remote Network Identifier";
"Remote Random Hostname" = "Remote Random Hostname";
"remoteNetworkIdentifierHelp_Title" = "Direct Link Detection";
"remoteNetworkIdentifierHelp" = "This setting allows VPN Tracker to detect situations where you don't need a VPN connection (e.g. when you're working from the office). You will still be able to use your VPN Shortcuts and other VPN Tracker features just as if you were connected over VPN.\n\nTo use this setting, add the hardware addresses (MAC addresses) of the router(s) in your remote network. If you are currently physically connected to the remote network, simply press the button to add the current router MAC address.";
"remoteRandomHostnameHelp_Title" = "VPN Gateway Address Randomization";
"remoteRandomHostnameHelp" = "If the VPN gateway address is a domain name, a random combination of characters is prepended to it on each connect to prevent DNS caching.\n\nE.g. a domain \"vpn.example.net\" would become \"RANDOM.vpn.example.net\" prior to quering the DNS server.\n\nThis feature requires a catch-all (wildcard) subdomain to be configured for the VPN gateway address.\n\nThe setting has no effect if the VPN gateway address is an IP address.";
"Retry count" = "Retry count";
"(retry every" = "(retry every";
"Retry interval" = "Retry interval";
"seconds if necessary" = "seconds if necessary";
"seconds, up to" = "seconds, up to";
"Seconds" = "Seconds";
"seconds" = "seconds";
"Send certificate" = "Send certificate";
"Send Cisco firewall attribute during Mode Config" = "Send Cisco firewall attribute during Mode Config";
"Send Cisco Unity Vendor ID" = "Send Cisco Unity Vendor ID";
"Send INITIAL-CONTACT message" = "Send INITIAL-CONTACT message";
"Send keep-alive ping every" = "Send keep-alive ping every";
"Send only traffic for the addresses below over VPN" = "Only send traffic for the following addresses over VPN";
"Send peer info" = "Send peer information to server";
"Send request for remote certificate" = "Send request for remote certificate";
"sendDPDHelp_Title" = "Dead Peer Detection (DPD)";
"sendDPDHelp" = "Dead Peer Detection lets the VPN gateway and VPN Tracker determine if the other end of the connection is still responding.\n\nYou should enable this option unless it is causing problems establishing the VPN connection.";
"sendPeerInfoHelp_Title" = "Send Peer Info";
"sendPeerInfoHelp" = "If enabled, VPN Tracker sends additional client information to the VPN gateway, just like OpenVPN's --push-peer-info option.\n\nEnable this if your VPN gateway or server-side configuration expects peer information from the client.";
"Set MTU for network used by VPN:" = "Set MTU for network used by VPN:";
"SHA1" = "SHA1";
"SHA2 (256)" = "SHA-256";
"SHA2 (384)" = "SHA-384";
"SHA2 (512)" = "SHA-512";
"Show additonal settings" = "Show additonal settings";
"Strict Padding Check" = "Strict padding check";
"strict" = "Use remote proposals if more secure (strict)";
"STUB" = "Framing Only";
"STUB2" = "Controlled by Server (v2)";
"STUB3" = "Controlled by Server (v3)";
"TCP" = "TCP";
"The pre-shared key field will be pre-filled with the pre-shared key from the keychain." = "The pre-shared key field will be pre-filled with the pre-shared key from the keychain.";
"timeoutHelp_Title" = "Connection Timeout";
"timeoutHelp" = "This timeout applies when establishing a VPN connection. It does not affect the connection once it is established.\n\nYou need to increase the timeout only if your Internet connection or the connection to your VPN gateway is extremely high latency (e.g. satellite-based Internet access or great distance between your location and the VPN gateway), or if the VPN gateway is extremely slow to respond.";
"Timers and Padding" = "Timers and Padding";
"times)" = "times)";
"TLS Version 1.0-1.1" = "1.0 / 1.1";
"TLS Version 1.2-1.3" = "1.2 / 1.3";
"TLS Version Auto" = "Automatic";
"TLS Version Latest" = "Latest";
"TLS Version" = "TLS Version";
"TLS" = "TLS";
"Traffic Control" = "Traffic Control";
"Treat delete payload in phase 2 as error" = "Treat delete payload in phase 2 as error";
"treatPhase2DeletePayloadAsErrorHelp_Title" = "Treat Phase 2 Delete Payload as Error";
"treatPhase2DeletePayloadAsErrorHelp" = "If checked, VPN Tracker will treat a delete message from the VPN gateway in phase 2 as an error. This is the default behavior and correct for most users.\n\nOnly uncheck if instructed to do so by technical support.";
"Tunnel Protocol Auto" = "Automatic";
"Tunnel Protocol DTLS" = "DTLS";
"Tunnel Protocol TLS" = "TLS (SSL)";
"Tunnel Protocol" = "Tunnel Protocol";
"tunnelProtocolHelp_Title" = "Protocol Used for Tunneling Traffic";
"tunnelProtocolHelp" = "\"Automatic\" selects the best available protocol and falls back to alternatives if needed.\n\nYou usually do not need to change this setting unless the selected protocol does not work correctly or you prefer a specific protocol.";
"UDP" = "UDP";
"Use current network" = "Use Current Router";
"Use stored XAUTH password as passcode" = "Use stored XAUTH password as passcode";
"Use" = "Use";
"useXAUTHPasswordAsPasscodeHelp_Title" = "Use stored XAUTH password as passcode";
"useXAUTHPasswordAsPasscodeHelp" = "Some VPN gateways incorrectly ask for a generated one-time passcode during XAUTH, but actually expect a normal password.\n\nIf your VPN gateway is affected by this problem, you may check this box to have VPN Tracker fulfill a passcode request with the XAUTH password stored in your keychain.";
"Verify remote certificate" = "Verify remote certificate";
"VPN Tracker X" = "VPN Tracker 365";
"vpnExemptNetworksHelp_Title" = "Traffic Control";
"vpnExemptNetworksHelp" = "Your VPN's remote network(s) determine the traffic that is sent over the VPN. For Host to Everywhere connections, all non-local traffic is sent.\n\nUse Traffic Control to exempt parts of the remote network(s) from VPN, either by specifying the addresses that should be exempt from VPN, or by specifying the addresses for which traffic should be sent over VPN.\n\nNote that it is not possible to send traffic over the VPN that is not part of the remote network(s).";
