Q253498 - How to Install a Certificate for Use with IP Security
Netscreen seems to support win2k VPN stuff natively. But you need a certificate. This page tells you how to do it.