Cisco VPN and Windows 7

Before I had posted a small blog entry on how it was basically impossible to get the Cisco VPN software working on a Windows Vista machine. It turned out to be one of the most hit blog entries I had – mainly due to the amount of help that was being provided in the comments. In the comments, many folks tried to help others with a solution. Though, one of the last entries I read recently was about a gentleman that pointed out that if you get all the Vista updates, that it seemed to just work.

There are many reasons I didn’t leave the safety of Windows XP and move to Vista over the time since it has come out. One of the biggest reasons was due to the fact that I just simply couldn’t get the Cisco VPN software working on Vista. Though, I have to say, I am now on Windows 7 on my main machine (32-bit) and you can get the Cisco VPN software running quite easily now. I have tested it out on two machines now and it works perfectly.

I myself used version 5.0.04.0300. Probably not one of the latest ones – but this one works and was one that was mentioned to be one of the more stable versions. I brought the setup.exe file for this to my local machine, right-clicked on the file and select ‘Run as Administrator’.

image

On one machine it took quite a number of minutes to install, but on my main desktop – it only took around 30 seconds. In both cases, the install went perfectly. I know that I passed my Cisco VPN problems into the Windows 7 team early on and I was communicating back and forth with them on this issue, so it would be nice to think I did my little part for Windows 7 :) …. but in any case, I’m so glad this now works. Goodbye Windows XP!

Print | posted on Thursday, March 05, 2009 8:35 PM

Feedback

# re: Cisco VPN and Windows 7

left by amir at 3/8/2009 9:05 AM Gravatar
We use a vpn to secure connectivity - this eliminates the need to expose internal systems to the whole wide world. Related to topic- proxy

# re: Cisco VPN and Windows 7

left by Ahmed at 3/18/2009 12:52 PM Gravatar
I am trying out windows seven on a dell latitude d820 and for some reason everytime i try to install Cisco Vpn it doesnt work. I get a blue screen and have to restore my computer. Any ideas?

I am using vpnclient-5.0.01.0600-k9.EXE to install.

# re: Cisco VPN and Windows 7

left by KFS at 3/29/2009 9:04 AM Gravatar
Can I download VPN software for free?
I need it!
Thanks for posting!

KFS:KhFreeSoft

# re: Cisco VPN and Windows 7

left by L_VV at 5/8/2009 3:59 AM Gravatar
Hi, folks!

I successfully installed Cisco VPN Client 5.00.05.290 under Windows 7 RC1 (build 7100).
No blue screen, nothing other errors.

Then I successfully installed Aladdin eToken PKI Client 5.1 for use it with eToken NG-OTP 32K.

Afterwards I imported my company certificate and plugged eToken to USB port.

Then I configured VPN Client to use a Certificate Authentication
and select my personal certificate (imported from eToken) from drop-down list.

When I trying to connect to my company server, ___the window for enter eToken PIN doesn't appears___.
After a few seconds VPN Client write "Not connected" in the status bar without any message box.

In it log with logging level 3 I can see some wrong things -
"Done with the hash signing with signature length of 0",
"Failed to RSA sign the hash for IKE phase 1 negotiation using my certificate" and so on.

---------------------------------------------------------------------
The small piece of a log:

31 00:14:06.746 05/06/09 Sev=Info/6 CERT/0x63600034
Attempting to sign the hash for Windows XP or higher.

32 00:14:07.105 05/06/09 Sev=Info/6 CERT/0x63600035
Done with the hash signing with signature length of 0.

33 00:14:07.105 05/06/09 Sev=Info/4 CERT/0xE3600005
Failed to RSA sign the hash for IKE phase 1 negotiation using my certificate.

34 00:14:07.105 05/06/09 Sev=Warning/2 IKE/0xE300009B
Failed to generate signature: Signature generation failed (SigUtil:97)

35 00:14:07.105 05/06/09 Sev=Warning/2 IKE/0xE300009B
Failed to build Signature payload (MsgHandlerMM:489)

36 00:14:07.105 05/06/09 Sev=Warning/2 IKE/0xE300009B
Failed to build MM msg5 (NavigatorMM:312)

37 00:14:07.105 05/06/09 Sev=Warning/2 IKE/0xE30000A7
Unexpected SW error occurred while processing Identity Protection (Main Mode) negotiator:(Navigator:2263)
...

---------------------------------------------------------------------
On other PC under Window XP with working VPN Client the same part of a log looks like next:

37 12:14:28.686 05/06/09 Sev=Info/6 CERT/0x63600034
Attempting to sign the hash for Windows XP or higher.

---> Approximatelly here (as I remember) appears the window for enter eToken PIN

38 12:20:20.624 05/06/09 Sev=Info/6 CERT/0x63600035
Done with the hash signing with signature length of 128.

39 12:20:20.624 05/06/09 Sev=Info/4 IKE/0x63000013
SENDING >>> ISAKMP OAK MM *(ID, CERT, CERT_REQ, SIG, NOTIFY:STATUS_INITIAL_CONTACT) to X.X.X.X
...
and then a connection successfully established.

As we can see, signature length here = 128, not zero how it is in a first case.
---------------------------------------------------------------------

If it need, I can post all log (approximately 150 lines).


I tried reinstall all software (VPN Client & eToken Client), including install it under real Administrator account,
I disabled second NIC, bluetooth and wifi adapters, I disabled IP routing between NICs, and so on.
All unsuccessful.

Previously on this PC under Vista all worked fine.

Any help very appreciated.

Sorry for my English :)

# re: Cisco VPN and Windows 7

left by Andreas at 5/12/2009 2:23 AM Gravatar
No one with an idea - have the same problem here....

Best regards,
Andreas

# re: Cisco VPN and Windows 7

left by L_VV at 5/13/2009 3:24 PM Gravatar
Maybe bad news :(

I contacted my regional Aladdin's representative on this problem.
---------------
I wrote: I have a problem with eToken NG-OTP (32K) under Windows 7 RC1 build 7100... (detailed description skipped).
etoken.support: At moment eToken does not support OS Windows 7.

I wrote: Maybe exists any betas, that I can try?
When you plan to release the version compatible with Windows 7?
etoken.support: Unfortunately, there is no available beta versions to support Windows 7.
About the time of release can be said only after the final release.
---------------

So I do not know what to do.
Perhaps someone will find a workaround to this problem...
Or maybe someone will be able to get a decision in the Aladdin's central office...

# re: Cisco VPN and Windows 7

left by VPN Haus at 6/15/2009 4:01 PM Gravatar
NCP engineering has a IPSec VPN client for Windows 7 [beta]. They have a free 30 day trial you can download to test it out. Pretty easy to config.

Check it out here, http://vpnhaus.wordpress.com/windows_7_beta/

# re: Cisco VPN and Windows 7

left by Bishop at 8/18/2009 2:45 AM Gravatar
I'm using W7 RC x86 and I just installed Cisco VPN, version: vpnclient-win-msi-4.8.02.0010-k9

This was the latest version we had on our servers at work, but it does the job. It installed in about a minute and I'm able to connect to my workstation at work using Remote Destkop now. The VPN built into W7 didn't work.

# re: Cisco VPN and Windows 7

left by Ryan at 8/20/2009 7:38 PM Gravatar
It's a workaround, but soooooo very easy after I spent hours on this. Use the Microsoft Virtual PC and XP mode

http://www.microsoft.com/windows/virtual-pc/download.aspx

Install whatever apps you need there and use the XP mode with Cisco VPN.

# re: Cisco VPN and Windows 7

left by Bishop at 8/21/2009 1:53 PM Gravatar
I installed W7 RTM x64 last night. Cisco VPN would not install in this environment, so my work around was to install Virtual PC 2007 and XP Mode. Even though the host PC is running x64, the virtual PC is running XP in 32 bit mode (I believe, I forgot to check), because I was able to install Cisco VPN and connect to my work network. However, I'm having a problem accessign my workstation once connected through VPN. It's most likely an IP problem. I'm going to try plugging in a static IP address when I get home from work today and if that doesn't work, I'll enabling IP forwarding.

# re: Cisco VPN and Windows 7

left by Kwayley at 8/25/2009 3:49 AM Gravatar
Hi all,

I was getting the same problems with a Windows 7 machine the I have running as a VPS in VirtualBox.

After trying various compatibility settings etc I eventually found that if I reinstalled my VPN certificates I was able to connect without a problem.

Not sure what happen to them but my Checkpoint VPN certificate got messed up as well.

Hope that helps.

# re: Cisco VPN and Windows 7

left by miha at 11/9/2009 4:50 AM Gravatar
I upgraded on Windows 7. Cisco VPN 3000 did not work any longer. I am trying to install a new VPN. but get the message "corrupted installation of VPM ". When I try to remove it with MSFT tool, it does not recognize any VPN app on my my desktop. Can someone tell me what to do?

# re: Cisco VPN and Windows 7

left by michy at 11/9/2009 1:10 PM Gravatar
I am getting a 442:Failed to enable Virtual Adapter error on Windows7 32bit. VPN Ver 5.0.06.0110. Can someone tell me how to enable virtual adapter on Win7?

# re: Cisco VPN and Windows 7

left by miha at 11/11/2009 8:59 AM Gravatar
Again, how do I get rid of the "corrupt installation" message?

# re: Cisco VPN and Windows 7

left by Radek at 11/15/2009 10:44 PM Gravatar
"Again, how do I get rid of the "corrupt installation" message?"

Unfotunately, I'm afraid you should reinstall Windows. Similar problem I had in XP (for some workstations), I couldn't remove the corrupted client..:(

Or try Windows Installer CleanUp. But I don't know if it is possible clean registry for Cisco VPN Client.

# re: Cisco VPN and Windows 7

left by alfa at 11/16/2009 7:47 AM Gravatar
I have no problem with Cisco VPN Client and eToken PKI under WinXP and WinVista. Trouble is with eToken PKI software under Win7 (it doesn't matter which version of PKI and Client VPN was used). Why Cisco VPN is good, but eToken PKI is bad? It's easy, because certificates are not existed in Win7 for Cisco VPN Client and MS Outlook. I installed VMware to have almost "XP mode" (it is full WinXP because I have Win7 Home Premium :( ) to have working certificates from eToken. But Aladdin will go down if they wouldn't do something to be compatible with Win7.
Post A Comment
Title:
Name:
Email:
Website:
Comment:
Verification: