Geeks With Blogs

News

  
Bill Evjen's Blog Code, Life and Community

Before I had posted a small blog entry on how it was basically impossible to get the Cisco VPN software working on a Windows Vista machine. It turned out to be one of the most hit blog entries I had – mainly due to the amount of help that was being provided in the comments. In the comments, many folks tried to help others with a solution. Though, one of the last entries I read recently was about a gentleman that pointed out that if you get all the Vista updates, that it seemed to just work.

There are many reasons I didn’t leave the safety of Windows XP and move to Vista over the time since it has come out. One of the biggest reasons was due to the fact that I just simply couldn’t get the Cisco VPN software working on Vista. Though, I have to say, I am now on Windows 7 on my main machine (32-bit) and you can get the Cisco VPN software running quite easily now. I have tested it out on two machines now and it works perfectly.

I myself used version 5.0.04.0300. Probably not one of the latest ones – but this one works and was one that was mentioned to be one of the more stable versions. I brought the setup.exe file for this to my local machine, right-clicked on the file and select ‘Run as Administrator’.

image

On one machine it took quite a number of minutes to install, but on my main desktop – it only took around 30 seconds. In both cases, the install went perfectly. I know that I passed my Cisco VPN problems into the Windows 7 team early on and I was communicating back and forth with them on this issue, so it would be nice to think I did my little part for Windows 7 :) …. but in any case, I’m so glad this now works. Goodbye Windows XP!

Posted on Thursday, March 5, 2009 8:35 PM | Back to top


Comments on this post: Cisco VPN and Windows 7

# re: Cisco VPN and Windows 7
Requesting Gravatar...
We use a vpn to secure connectivity - this eliminates the need to expose internal systems to the whole wide world. Related to topic- proxy
Left by amir on Mar 08, 2009 9:05 AM

# re: Cisco VPN and Windows 7
Requesting Gravatar...
I am trying out windows seven on a dell latitude d820 and for some reason everytime i try to install Cisco Vpn it doesnt work. I get a blue screen and have to restore my computer. Any ideas?

I am using vpnclient-5.0.01.0600-k9.EXE to install.
Left by Ahmed on Mar 18, 2009 12:52 PM

# re: Cisco VPN and Windows 7
Requesting Gravatar...
Can I download VPN software for free?
I need it!
Thanks for posting!

KFS:KhFreeSoft
Left by KFS on Mar 29, 2009 9:04 AM

# re: Cisco VPN and Windows 7
Requesting Gravatar...
Hi, folks!

I successfully installed Cisco VPN Client 5.00.05.290 under Windows 7 RC1 (build 7100).
No blue screen, nothing other errors.

Then I successfully installed Aladdin eToken PKI Client 5.1 for use it with eToken NG-OTP 32K.

Afterwards I imported my company certificate and plugged eToken to USB port.

Then I configured VPN Client to use a Certificate Authentication
and select my personal certificate (imported from eToken) from drop-down list.

When I trying to connect to my company server, ___the window for enter eToken PIN doesn't appears___.
After a few seconds VPN Client write "Not connected" in the status bar without any message box.

In it log with logging level 3 I can see some wrong things -
"Done with the hash signing with signature length of 0",
"Failed to RSA sign the hash for IKE phase 1 negotiation using my certificate" and so on.

---------------------------------------------------------------------
The small piece of a log:

31 00:14:06.746 05/06/09 Sev=Info/6 CERT/0x63600034
Attempting to sign the hash for Windows XP or higher.

32 00:14:07.105 05/06/09 Sev=Info/6 CERT/0x63600035
Done with the hash signing with signature length of 0.

33 00:14:07.105 05/06/09 Sev=Info/4 CERT/0xE3600005
Failed to RSA sign the hash for IKE phase 1 negotiation using my certificate.

34 00:14:07.105 05/06/09 Sev=Warning/2 IKE/0xE300009B
Failed to generate signature: Signature generation failed (SigUtil:97)

35 00:14:07.105 05/06/09 Sev=Warning/2 IKE/0xE300009B
Failed to build Signature payload (MsgHandlerMM:489)

36 00:14:07.105 05/06/09 Sev=Warning/2 IKE/0xE300009B
Failed to build MM msg5 (NavigatorMM:312)

37 00:14:07.105 05/06/09 Sev=Warning/2 IKE/0xE30000A7
Unexpected SW error occurred while processing Identity Protection (Main Mode) negotiator:(Navigator:2263)
...

---------------------------------------------------------------------
On other PC under Window XP with working VPN Client the same part of a log looks like next:

37 12:14:28.686 05/06/09 Sev=Info/6 CERT/0x63600034
Attempting to sign the hash for Windows XP or higher.

---> Approximatelly here (as I remember) appears the window for enter eToken PIN

38 12:20:20.624 05/06/09 Sev=Info/6 CERT/0x63600035
Done with the hash signing with signature length of 128.

39 12:20:20.624 05/06/09 Sev=Info/4 IKE/0x63000013
SENDING >>> ISAKMP OAK MM *(ID, CERT, CERT_REQ, SIG, NOTIFY:STATUS_INITIAL_CONTACT) to X.X.X.X
...
and then a connection successfully established.

As we can see, signature length here = 128, not zero how it is in a first case.
---------------------------------------------------------------------

If it need, I can post all log (approximately 150 lines).


I tried reinstall all software (VPN Client & eToken Client), including install it under real Administrator account,
I disabled second NIC, bluetooth and wifi adapters, I disabled IP routing between NICs, and so on.
All unsuccessful.

Previously on this PC under Vista all worked fine.

Any help very appreciated.

Sorry for my English :)
Left by L_VV on May 08, 2009 3:59 AM

# re: Cisco VPN and Windows 7
Requesting Gravatar...
No one with an idea - have the same problem here....

Best regards,
Andreas
Left by Andreas on May 12, 2009 2:23 AM

# re: Cisco VPN and Windows 7
Requesting Gravatar...
Maybe bad news :(

I contacted my regional Aladdin's representative on this problem.
---------------
I wrote: I have a problem with eToken NG-OTP (32K) under Windows 7 RC1 build 7100... (detailed description skipped).
etoken.support: At moment eToken does not support OS Windows 7.

I wrote: Maybe exists any betas, that I can try?
When you plan to release the version compatible with Windows 7?
etoken.support: Unfortunately, there is no available beta versions to support Windows 7.
About the time of release can be said only after the final release.
---------------

So I do not know what to do.
Perhaps someone will find a workaround to this problem...
Or maybe someone will be able to get a decision in the Aladdin's central office...
Left by L_VV on May 13, 2009 3:24 PM

# re: Cisco VPN and Windows 7
Requesting Gravatar...
NCP engineering has a IPSec VPN client for Windows 7 [beta]. They have a free 30 day trial you can download to test it out. Pretty easy to config.

Check it out here, http://vpnhaus.wordpress.com/windows_7_beta/
Left by VPN Haus on Jun 15, 2009 4:01 PM

# re: Cisco VPN and Windows 7
Requesting Gravatar...
I'm using W7 RC x86 and I just installed Cisco VPN, version: vpnclient-win-msi-4.8.02.0010-k9

This was the latest version we had on our servers at work, but it does the job. It installed in about a minute and I'm able to connect to my workstation at work using Remote Destkop now. The VPN built into W7 didn't work.
Left by Bishop on Aug 18, 2009 2:45 AM

# re: Cisco VPN and Windows 7
Requesting Gravatar...
It's a workaround, but soooooo very easy after I spent hours on this. Use the Microsoft Virtual PC and XP mode

http://www.microsoft.com/windows/virtual-pc/download.aspx

Install whatever apps you need there and use the XP mode with Cisco VPN.
Left by Ryan on Aug 20, 2009 7:38 PM

# re: Cisco VPN and Windows 7
Requesting Gravatar...
I installed W7 RTM x64 last night. Cisco VPN would not install in this environment, so my work around was to install Virtual PC 2007 and XP Mode. Even though the host PC is running x64, the virtual PC is running XP in 32 bit mode (I believe, I forgot to check), because I was able to install Cisco VPN and connect to my work network. However, I'm having a problem accessign my workstation once connected through VPN. It's most likely an IP problem. I'm going to try plugging in a static IP address when I get home from work today and if that doesn't work, I'll enabling IP forwarding.
Left by Bishop on Aug 21, 2009 1:53 PM

# re: Cisco VPN and Windows 7
Requesting Gravatar...
Hi all,

I was getting the same problems with a Windows 7 machine the I have running as a VPS in VirtualBox.

After trying various compatibility settings etc I eventually found that if I reinstalled my VPN certificates I was able to connect without a problem.

Not sure what happen to them but my Checkpoint VPN certificate got messed up as well.

Hope that helps.
Left by Kwayley on Aug 25, 2009 3:49 AM

# re: Cisco VPN and Windows 7
Requesting Gravatar...
I upgraded on Windows 7. Cisco VPN 3000 did not work any longer. I am trying to install a new VPN. but get the message "corrupted installation of VPM ". When I try to remove it with MSFT tool, it does not recognize any VPN app on my my desktop. Can someone tell me what to do?
Left by miha on Nov 09, 2009 4:50 AM

# re: Cisco VPN and Windows 7
Requesting Gravatar...
I am getting a 442:Failed to enable Virtual Adapter error on Windows7 32bit. VPN Ver 5.0.06.0110. Can someone tell me how to enable virtual adapter on Win7?
Left by michy on Nov 09, 2009 1:10 PM

# re: Cisco VPN and Windows 7
Requesting Gravatar...
Again, how do I get rid of the "corrupt installation" message?
Left by miha on Nov 11, 2009 8:59 AM

# re: Cisco VPN and Windows 7
Requesting Gravatar...
"Again, how do I get rid of the "corrupt installation" message?"

Unfotunately, I'm afraid you should reinstall Windows. Similar problem I had in XP (for some workstations), I couldn't remove the corrupted client..:(

Or try Windows Installer CleanUp. But I don't know if it is possible clean registry for Cisco VPN Client.
Left by Radek on Nov 15, 2009 10:44 PM

# re: Cisco VPN and Windows 7
Requesting Gravatar...
I have no problem with Cisco VPN Client and eToken PKI under WinXP and WinVista. Trouble is with eToken PKI software under Win7 (it doesn't matter which version of PKI and Client VPN was used). Why Cisco VPN is good, but eToken PKI is bad? It's easy, because certificates are not existed in Win7 for Cisco VPN Client and MS Outlook. I installed VMware to have almost "XP mode" (it is full WinXP because I have Win7 Home Premium :( ) to have working certificates from eToken. But Aladdin will go down if they wouldn't do something to be compatible with Win7.
Left by alfa on Nov 16, 2009 7:47 AM

# re: Cisco VPN and Windows 7
Requesting Gravatar...
quero o site pra baixar a vpn que funcione no windows 7!!
obrigado
Left by david on Nov 25, 2009 12:55 AM

# re: Cisco VPN and Windows 7
Requesting Gravatar...
hi
Left by Zaza on Nov 28, 2009 7:48 AM

# re: Cisco VPN and Windows 7
Requesting Gravatar...
I could not compelete the installation process in my
laptop which is WINDOWS 7 version.
will you show me the installaion process?
Left by MAHATABHOSSAIN on Nov 30, 2009 5:39 PM

# re: Cisco VPN and Windows 7
Requesting Gravatar...
i want to try
Left by pahrus salam on Dec 01, 2009 3:47 AM

# re: Cisco VPN and Windows 7
Requesting Gravatar...
problem
i have windows 7 client vpn cisco, after 30 minutes
the client disconect.
it's possible change this value
afer with windows xp no problem
thanks
Left by ilario on Dec 27, 2009 11:06 PM

# re: Cisco VPN and Windows 7
Requesting Gravatar...
In reading through these comments I've felt the need to confirm that there is no Cisco VPN client (at this time) that works with the 64-bit version of windows 7 and while there is a native VPN client (via what is known as "Direct Access"), this unfortunately will not work with attempting to connect to a Cisco ASDM.
Left by Trusk on Jan 19, 2010 5:19 PM

# re: Cisco VPN and Windows 7
Requesting Gravatar...
I have been battling with the Cisco client on my latitude for weeks and still cannot get it to route traffic. Installs fine, looks like it connects just fine, but no traffic. Its not the router since my MAC connects to the VPN just fine and if I dial out across my BB and launch the same client it works fine as well.

Using 5.0.06.160 ... any ideas?
Left by Chuck Keeler on Feb 16, 2010 9:14 AM

# re: Cisco VPN and Windows 7
Requesting Gravatar...
It was basically impossible to get the Cisco VPN software working on a Windows Vista machine.
If you know more information then click here
Left by Ricky on Mar 14, 2010 8:58 PM

# re: Cisco VPN and Windows 7
Requesting Gravatar...
Cisco VPN is not installing on my Windows 7 64-bit .Can anybody help out this .
Left by ramesh on Mar 28, 2010 10:48 PM

# re: Cisco VPN and Windows 7
Requesting Gravatar...
I have installed win 7 pro 64 bit and use xp mode to connnect remotely with cisco ssl vpn but am getting a message saying it doesn't support remote connection. I have no problem connecting using my old machine with win xp pro. Please help.
Left by Jaime on Apr 18, 2010 12:27 PM

# re: Cisco VPN and Windows 7
Requesting Gravatar...
Then I configured VPN Client to use a Certificate Authentication
and select my personal certificate (imported from eToken) from drop-down list.

When I trying to connect to my company server, ___the window for enter eToken PIN doesn't appears___.
After a few seconds VPN Client write "Not connected" in the status bar without any message box.
Left by Katie Tam on May 02, 2010 7:19 PM

# re: Cisco VPN and Windows 7
Requesting Gravatar...
i need cisco vpn client for windows 7 pro
Left by Teo Eng Seng on May 15, 2010 12:27 AM

# re: Cisco VPN and Windows 7
Requesting Gravatar...
i need cisco vpn client for windows7 64bits
Left by ARINDAM SHAW RONGPI on May 30, 2010 8:48 PM

Your comment:
 (will show your gravatar)


Copyright © Bill Evjen | Powered by: GeeksWithBlogs.net