Getting your Android KitKat device to work with pfSense IPsec VPN server is a finicky process and the settings on both sides need to be exact. Android only supports a small subset of common encryption schemes and this article will show you what settings to use.
These errors indicate that the phone cannot use the ROM provided (via Samsung’s ODIN loader) because the ROM is either not legitimate or is a version prior to the one currently installed. Basically, if you’ve flashed a ROM that is Android 4.4.2 (KitKat), you will not be able to revert back to an earlier version (such as Android 4.2.2).
This tutorial walks you through installing Android 4.4.2 Kit Kat [OmniROM] on your Samsung Galaxy S4 for Sprint networks.