I'm considering investing in a Cisco ASA5505. As Cisco's own VPN client requires a service subscription, which I am trying to do without, are there any free or low-cost ipsec VPN clients that will work with the ASA and run on Windows XP? Is XP's built-in ipsec client compatible? Any links to guides and walkthroughs would be much appreciated.
Have you taken a look at shrew?
http://www.shrew.net/software. I've used it on windows machines as a replacement for a specific version of the cisco client which was not playing nicely with windows 7.
vpnc combined with network-manager-vpnc is a great option if you're on a linux platform though.
Came across this article on how to get Windows Vista to connect to a Cisco PIX using a native client. Since ASA is mostly just a glorified PIX, these options might also work for you.
I also have to agree with the previous posts that the 'vpnc' client that you can install on Linux is just great, as it does not force any network routes or blockage like the official Cisco client does. You decide what your computer routes through the tunnel, as it should be.
A cludge of a solution:
- Virtualize your WinXP installation
- Install Ubuntu 9.04
- Install Ubuntu package vpnc (vpn cisco)
- Install VMWare
- Run WinXP inside VMWare with NAT interface (not bridging)
- Establish your VPN with vpnc in Ubuntu, and the Virtual Machine will use that VPN connection.
I would consider this a bad solution - too convoluted. You will want to service contract in order to get security updates for your router and to get access to the Cisco Support Site.
If the Cisco device is just too expensive, consider a lower cost alternative, either from a different vendor or "Roll-Your-Own". Just remember RFC 1925 truth #3
With sufficient thrust, pigs fly just fine. However, this is not necessarily a good idea. It is hard to be sure where they are going to land, and it could be dangerous sitting under them as they fly overhead.