64-bit Cisco VPN client (IPsec)?

windows vpn cisco ipsec 64-bit

126,095

Solution 1

Hmm, nobody mentioned Shrew Soft VPN Client yet ? It's a free (as in beer) and cross platform VPN client that compatible with Windows 64 bit. Although free, but support from the author has been great. Currently it doesn't support hybrid xauth+certificate mode but the feature will come soon.

Lancom also provides a 64 bit VPN Client for Windows, but IMO they just resell/rebrand NCP's Client.

You can also try TheGreenBow VPN Client, which is a bit cheaper (56 EUR) than NCP/Lancom's client.

Solution 2

I just tried this free IPsec VPN client, it works well in vista x64 and win 7 RC x64. I was also able to import a cisco .pcf directly into shrew. Just select the pcf file and import.

www.shrew.net/software

Shrew has supports for windows, linux and BSD

There is no need to buy NCP

Solution 3

Cisco now supports the 64-bit OS with an IPsec VPN client, see Release Notes for Cisco VPN Client, Release 5.0.07.

Solution 4

On our Cisco VPN, we have Point-to-Point Tunnel Protocol (PPTP) tunneling method configured which allows us to use the native Windows client. That's the only way we've been able to get Vista 64-bit users to connect.

Solution 5

I am using Windows 7 RC 64-bit and I run the Cisco VPN client in "Virtual XP" mode. It works great, pretty seamless. Probably doesn't help you much right now, but good to know you can use it when Windows 7 is released.

View more solutions

126,095

mika

An experienced developer and a business person. I'm currently working as a COO in a small SaaS company. My day job includes pretty much everything in running the tech side of the business: development management infrastructure management product development occasional consulting, mostly integrations to our app digital marketing (yes, this is mostly tech)

Updated on September 17, 2022

Comments

mika over 1 year
Cisco VPN client (IPsec) does not support 64bit Windows.

Worse, Cisco does not even plan to release a 64-bit version, instead they say that
"For x64 (64-bit) Windows support, you must utilize Cisco's next-generation Cisco AnyConnect VPN Client."
- Cisco VPN Client Introduction
- Cisco VPN Client FAQ
But SSL VPN licences cost extra. For example, most new ASA firewalls come with plenty of IPSec VPN licences but only a few SSL VPN licences.

What alternatives do you have for 64-bit Windows? So far, I know two:
1. 32-bit Cisco VPN Client on a virtual machine
2. NCP Secure Entry Client on 64-bit Windows
Any other suggestions or experiences?
- tmbrggmn almost 15 years
  
  THere is a 64-bit client for cisco VPN. I have it installed and running at home, to connect to one of my clients. ..thomas at socialcash.com and I will send it to you.
- tmbrggmn almost 15 years
  
  I was mistaken, my NE pulled a fast one on me and used anyconnect vs the IPSEC version. Sorry for the confusion. -T
- nray over 14 years
  
  The problem is if you have an older PIX, then you may find that while you can install the AnyConnect client, your firewall doesn't support it. Cisco's documentation on just what will work is a wee bit cryptic, and I haven't really tested AnyConnect with a PIX, but I can say that ShrewSoft VPN client for Windows works well in Win7 x64, RC at least.
- djangofan about 13 years
  
  Ok, so the question is that your wanting specifically a "IPSec type of client" which the Cisco AnyConnect doesn't qualify as?
mika almost 15 years

I would prefer to use the VPN solution that ALL our clients use, namely Cisco IPsec VPN. Having multiple vpn solutions to manage does not add any value. However, at home and in university networks I have found OpenVPN to work well, if little slow
mika almost 15 years

Ok. We are a small shop with one ASA 5510, and go with the default licensing schemes. There are 6 licencing options for SSL VPN Peers (2-250 peers) and no options for IPsec (250) (bit.ly/RXjMH). I remember reading that AnyConnect could support IPsec some day, but for the moment, it doesn't.
a_hardin almost 15 years

From what I understand, Cisco includes 2 SSLVPN licenses with their software. I don't think it does any kind of check, though. You could use more than 2, but you're not licensed unless you actually purchase the extra licenses.
Portman almost 15 years

I believe we are using IPSec over AnyConnect. I'll double-check.
tmbrggmn almost 15 years

PW...we have licenses for each of us at the company..when we were 40 not everyone could be on at the same time. a 5510 comes with a default number of seats as part of the "IOS" At some point it is tracked on a connection basis....also we are doing DTLS over Anyconnect not IPSEC.
mika almost 15 years

Shrew is nice! But there's one downside. You cannot import Cisco VPN client profiles (.pcf files). You can manually copy an existing Cisco profile to a new Shrew profile, but only if you know the pre-shared key. This means that you can't use Shrew if you only have profiles with hashes of pre-shared keys given to you, and no hope of getting the actual key. NCP can import .pcf files and use psk hashes.
Jim Geurts almost 15 years

I tried this, but had no luck... the program runs, but I can't connect to VPN. Did you have to do something special?
marc_s almost 15 years

Yes, I look at Shrew, but the lack of PCF import is a killer for me....
Lamnk almost 15 years

Then make a request to the author. IMO it's not very hard to implement that feature
mika almost 15 years

PCF import was added in version 2.1.5
mika almost 15 years

PCF import was added in version 2.1.5
Shog9 almost 15 years

Just downloaded and tried the latest RC, and gotta say... This is great! Imported my PCF files without complaint, connected without issue. Simple UI, sane options, fast... Cisco should fire their programmers and beg these guys for a distribution license.
prabu over 14 years

FYI: Tried installing their latest stable for-vista-64bit on Windows 7 Ultimate. It caused a blue screen and blue screen to appear on subsequent boots. I fixed the bluescreen by running the uninstaller in the program files directory and deleting the registry entries associated with shrewsoft.
prabu over 14 years

This works great for me. I did nothing special... I just setup an "XP Mode" VM and installed the 32bit Cisco client within and it works.
Adam Lassek over 14 years

I'm on Windows 7 Enterprise, and this caused a bluescreen during install and then bluescreened during boot. Had to repair Windows before I could boot again. Stay away from this if you're on Windows 7.
Adam Lassek over 14 years

This does not work with Windows 7 x64 final.
GregD over 14 years

@mika You should be moving away from pcf files anyway. The "hashed" pre-shared keys are extremely trivial to hack.
user1145202 about 14 years

Note that Windows 7 is now supported as of 12/15/2009
Christopher Edwards over 13 years

It's a real shame it doesn't support pre-login connections for AD/Domain Logins...
Lamnk over 13 years

@Christopher: I suggest you contact the author, he does listen to feature requests (unlike Cisco)
Christopher Edwards over 13 years

@Lamnk: The feature is on the planned list according to the site.
APR almost 13 years

@Adam Lassek: It does now!
pauska almost 13 years

Not an (helpful) answer..