Cisco VPN client (IPsec) does not support 64bit Windows.
Worse, Cisco does not even plan to release a 64-bit version, instead they say that
"For x64 (64-bit) Windows support, you must utilize Cisco's next-generation Cisco AnyConnect VPN Client."
But SSL VPN licences cost extra. For example, most new ASA firewalls come with plenty of IPSec VPN licences but only a few SSL VPN licences.
What alternatives do you have for 64-bit Windows? So far, I know two:
- 32-bit Cisco VPN Client on a virtual machine
- NCP Secure Entry Client on 64-bit Windows
Any other suggestions or experiences?
Hmm, nobody mentioned Shrew Soft VPN Client yet ? It's a free (as in beer) and cross platform VPN client that compatible with Windows 64 bit. Although free, but support from the author has been great. Currently it doesn't support hybrid xauth+certificate mode but the feature will come soon.
Lancom also provides a 64 bit VPN Client for Windows, but IMO they just resell/rebrand NCP's Client.
You can also try TheGreenBow VPN Client, which is a bit cheaper (56 EUR) than NCP/Lancom's client.
I just tried this free IPsec VPN client, it works well in vista x64 and win 7 RC x64. I was also able to import a cisco .pcf directly into shrew. Just select the pcf file and import.
www.shrew.net/software
Shrew has supports for windows, linux and BSD
There is no need to buy NCP
Cisco now supports the 64-bit OS with an IPsec VPN client, see Release Notes for Cisco VPN Client, Release 5.0.07.
On our Cisco VPN, we have Point-to-Point Tunnel Protocol (PPTP) tunneling method configured which allows us to use the native Windows client. That's the only way we've been able to get Vista 64-bit users to connect.
I am using Windows 7 RC 64-bit and I run the Cisco VPN client in "Virtual XP" mode. It works great, pretty seamless. Probably doesn't help you much right now, but good to know you can use it when Windows 7 is released.
The Shrew Soft VPN Client is awesome. Just make sure to go with the Windows 7 supported version (currently 2.1.5-rc-3) if you are installing on Windows 7. Otherwise you'll get a BSOD during the install.
Cisco has an official 64-bit VPN client in beta:
In addition to serving as a general maintenance release, the Cisco VPN Client 5.0.7 beta is compatible with Windows 7 & Windows Vista 64-bit environments. A 64-bit specific compatible image is available for installation on these platforms.
Please have communicate feedback (both positive and problems) to [email protected].
Key Capabilities available for Beta Testing: New Platform support – Windows 7 & Windows Vista 64-bit platform compatibility Software Access: http://tools.cisco.com/support/downloads/go/Redirect.x?mdfid=281940730 (under 5.BETA) Software is available for download by any customer with a Cisco.com SMARTnet™ enabled login.
There are currently no plans to support Windows XP 64 bit in the VPN client.
The Version 5 clients no longer have the integrated stateful firewall, you need to add a 3rd party firewall if desired.
Use OpenVPN. It's open source, rock solid, very flexible and cross platform.
Cisco released a new licensing model around May/June called AnyConnect Essentials that is a significantly cheaper alternative than the original SSL VPN licensing. Street price for the ASA5510 is $105. This is for the full 250 users, not per user.
I have got Shrew Soft 2.1.5-RC4 working with our Cisco VPN Concentrator 3005, on both Windows Vista Ultimate 64 bit and Windows 7 Professional 64 bit.
I had to set up a new profile on the VPN concentrator that used pre shared keys rather than a certificate for each user.
Then on a spare x86 laptop, I installed the traditional Cisco client 5.x, made sure I could connect to the new profile. Then I exported the PCF file and imported it into the Shrew Soft x64 client. Everything worked!