Question

25

15

Cisco VPN client (IPsec) does not support 64bit Windows.

Worse, Cisco does not even plan to release a 64-bit version, instead they say that
"For x64 (64-bit) Windows support, you must utilize Cisco's next-generation Cisco AnyConnect VPN Client."

But SSL VPN licences cost extra. For example, most new ASA firewalls come with plenty of IPSec VPN licences but only a few SSL VPN licences.

What alternatives do you have for 64-bit Windows? So far, I know two:

32-bit Cisco VPN Client on a virtual machine
NCP Secure Entry Client on 64-bit Windows

Any other suggestions or experiences?

-mika-

edited May 6 at 10:23

asked May 6 at 10:18

mika
530●1●3●7

	THere is a 64-bit client for cisco VPN. I have it installed and running at home, to connect to one of my clients. ..thomas at socialcash.com and I will send it to you. – Thomas Denton May 19 at 3:08
	I was mistaken, my NE pulled a fast one on me and used anyconnect vs the IPSEC version. Sorry for the confusion. -T – Thomas Denton May 27 at 11:06
	The problem is if you have an older PIX, then you may find that while you can install the AnyConnect client, your firewall doesn't support it. Cisco's documentation on just what will work is a wee bit cryptic, and I haven't really tested AnyConnect with a PIX, but I can say that ShrewSoft VPN client for Windows works well in Win7 x64, RC at least. – nray Sep 11 at 13:07

DLux · Answer 1 · 2009-09-14 23:58:28Z

25

Hmm, nobody mentioned Shrew Soft VPN Client yet ? It's a free (as in beer) and cross platform VPN client that compatible with Windows 64 bit. Although free, but support from the author has been great. Currently it doesn't support hybrid xauth+certificate mode but the feature will come soon.

Lancom also provides a 64 bit VPN Client for Windows, but IMO they just resell/rebrand NCP's Client.

You can also try TheGreenBow VPN Client, which is a bit cheaper (56 EUR) than NCP/Lancom's client.

edited Sep 14 at 23:58

DLux
3,838●5●20

answered May 30 at 14:19

Lamnk
287●1●6

3

Shrew is nice! But there's one downside. You cannot import Cisco VPN client profiles (.pcf files). You can manually copy an existing Cisco profile to a new Shrew profile, but only if you know the pre-shared key. This means that you can't use Shrew if you only have profiles with hashes of pre-shared keys given to you, and no hope of getting the actual key. NCP can import .pcf files and use psk hashes. – mika Jun 8 at 14:13

Yes, I look at Shrew, but the lack of PCF import is a killer for me.... – marc_s Jun 22 at 9:58

Then make a request to the author. IMO it's not very hard to implement that feature – Lamnk Jun 27 at 1:55

5

PCF import was added in version 2.1.5 – mika Aug 3 at 8:53

5

Just downloaded and tried the latest RC, and gotta say... This is great! Imported my PCF files without complaint, connected without issue. Simple UI, sane options, fast... Cisco should fire their programmers and beg these guys for a distribution license. – Shog9 Aug 4 at 21:37

show 3 more comments

MiDiMaN · Answer 2 · 2009-08-02 01:42:38Z

6

I just tried this free IPsec VPN client, it works well in vista x64 and win 7 RC x64. I was also able to import a cisco .pcf directly into shrew. Just select the pcf file and import.

www.shrew.net/software

Shrew has supports for windows, linux and BSD

There is no need to buy NCP

answered Aug 2 at 1:42

MiDiMaN
61●1●1

1

PCF import was added in version 2.1.5 – mika Aug 3 at 8:52

This does not work with Windows 7 x64 final. – Adam Lassek Sep 8 at 17:01

Joseph · Answer 3 · 2009-05-06 11:46:44Z

On our Cisco VPN, we have Point-to-Point Tunnel Protocol (PPTP) tunneling method configured which allows us to use the native Windows client. That's the only way we've been able to get Vista 64-bit users to connect.

vitiris · Answer 4 · 2009-05-30 12:20:56Z

4

I am using Windows 7 RC 64-bit and I run the Cisco VPN client in "Virtual XP" mode. It works great, pretty seamless. Probably doesn't help you much right now, but good to know you can use it when Windows 7 is released.

answered May 30 at 12:20

vitiris
41●1

	I tried this, but had no luck... the program runs, but I can't connect to VPN. Did you have to do something special? – Jim Geurts Jun 10 at 18:21
	This works great for me. I did nothing special... I just setup an "XP Mode" VM and installed the 32bit Cisco client within and it works. – hamlin11 Sep 3 at 23:01

jswoods7 · Answer 5 · 2009-09-14 23:18:12Z

The Shrew Soft VPN Client is awesome. Just make sure to go with the Windows 7 supported version (currently 2.1.5-rc-3) if you are installing on Windows 7. Otherwise you'll get a BSOD during the install.

Joe Cho · Answer 6 · 2009-08-14 14:15:08Z

2

Thank you all for helping me get shrew soft vpn. I imported the pcf file and downloaded a certificate/pem file and I was good to go.

answered Aug 14 at 14:15

Joe Cho
21●1

rysi · Answer 7 · 2009-09-14 21:52:33Z

Cisco released a new licensing model around May/June called AnyConnect Essentials that is a significantly cheaper alternative than the original SSL VPN licensing. Street price for the ASA5510 is $105. This is for the full 250 users, not per user.

Chopper3 · Answer 8 · 2009-05-06 10:36:18Z

1

It's almost as if Cisco were a company known for looking for every opportunity to scalp their customer base ;)

answered May 6 at 10:36

Chopper3
13.3k●6●25

	Yep. But I also understand that Cisco wants to get rid of IPsec VPN for technical reasons. Who wouldn't. But SSL VPN right now is not a free substitute. Besides licences there is the hassle with multiple VPN clients as IPsec VPN is not going to vanish anytime soon. – mika May 6 at 11:21
	Oh I know, I was just being cutting - I'd just come out of a meeting with them when I spotted the question :) – Chopper3 May 6 at 12:01

Portman · Answer 9 · 2009-05-06 20:21:07Z

1

But SSL VPN licences cost extra.

Really? We recently switched to 64-bit desktops, and hence switched from the Cisco IPSec client to Cisco AnyConnect, and we were not required to pay any additional licenses.

Do you have a Cisco rep? You might want to take it up with them.

edited May 6 at 20:21

answered May 6 at 11:53

Portman
1,848●3●18

	So Cisco AnyConnect VPN handles IPSec VPN too? From their website I thought, that it is only for SSL VPN. – softly.lt May 6 at 12:41
	Ok. We are a small shop with one ASA 5510, and go with the default licensing schemes. There are 6 licencing options for SSL VPN Peers (2-250 peers) and no options for IPsec (250) (bit.ly/RXjMH). I remember reading that AnyConnect could support IPsec some day, but for the moment, it doesn't. – mika May 6 at 13:07
	From what I understand, Cisco includes 2 SSLVPN licenses with their software. I don't think it does any kind of check, though. You could use more than 2, but you're not licensed unless you actually purchase the extra licenses. – a_hardin May 6 at 15:35
	I believe we are using IPSec over AnyConnect. I'll double-check. – Portman May 6 at 20:21
	PW...we have licenses for each of us at the company..when we were 40 not everyone could be on at the same time. a 5510 comes with a default number of seats as part of the "IOS" At some point it is tracked on a connection basis....also we are doing DTLS over Anyconnect not IPSEC. – Thomas Denton May 19 at 3:05

Marc · Answer 10 · 2009-10-26 20:35:36Z

1

For me Shrew works like a charm. Imports PCF files ! Perfect !

answered Oct 26 at 20:35

Marc
11●1

Ian Burrowes · Answer 11 · 2010-01-04 06:07:32Z

I have got Shrew Soft 2.1.5-RC4 working with our Cisco VPN Concentrator 3005, on both Windows Vista Ultimate 64 bit and Windows 7 Professional 64 bit.

I had to set up a new profile on the VPN concentrator that used pre shared keys rather than a certificate for each user.

Then on a spare x86 laptop, I installed the traditional Cisco client 5.x, made sure I could connect to the new profile. Then I exported the PCF file and imported it into the Shrew Soft x64 client. Everything worked!

Alex · Answer 12 · 2010-01-21 11:17:54Z

I'm using VPNC Front End on XP, Vista 32/64 and Seven and both 32 and 64 bit. http://sourceforge.net/projects/vpncfe/

It also can impost cisco'd PCF file with VPN cinfig data.

Install this tool as admin and Run it as admin, on both Vista/Win7. While you are on Win7, run it in compatibility mod as Vista, if you have problems.

djangofan · Answer 13 · 2010-01-09 17:55:46Z

The original poster asks for other suggestions and so why use Shrew or OpenVPN when you could use the free unmanaged version of LogmeIn Hamachi2 + Terminal Services and have yourself reliably connected in minutes?

A User · Answer 14 · 2010-01-12 11:41:13Z

0

I tried Shrew and it inmported the PCF files fine. Connected fine. As soon as I tried to browse the clients urls Shrew disconnected. Repeatedly. Not so pretty.

answered Jan 12 at 11:41

A User
1

David Schmitt · Answer 15 · 2009-05-06 10:28:33Z

-1

Use OpenVPN. It's open source, rock solid, very flexible and cross platform.

answered May 6 at 10:28

David Schmitt
1,216●2●12

1

I would prefer to use the VPN solution that ALL our clients use, namely Cisco IPsec VPN. Having multiple vpn solutions to manage does not add any value. However, at home and in university networks I have found OpenVPN to work well, if little slow – mika May 6 at 11:14

Stevew2 · Answer 16 · 2009-12-04 19:00:26Z

-1

couldn't get Shrew (RC 2.1.5) to work with Win7 x64 and 3000 concentrator. not sure what the issues are - would be helpful if the vpn was actually documented!

answered Dec 4 at 19:00

Stevew2
1

Earl Gibson · Answer 17 · 2009-12-23 05:17:57Z

Hello,

  I am running multiple Cisco 3030's at work.  I get a login prompt when using Shrew, but User Authentication Failure.  I checked Shrew's compatibility list and a Cisco 3000 is not there, just the PIX and ASA.

  Anyone run into the same issue?

64-bit Cisco VPN client (IPsec) ?

17 Answers

Your Answer

Not the answer you're looking for? Browse other questions tagged ipsec cisco vpn windows x64 or ask your own question.

Greetings!

Related