Cisco Systems VPN Client: Difference between revisions

Revision as of 03:12, 19 January 2018

Latest revision as of 17:40, 15 July 2024

(4 intermediate revisions by 3 users not shown)

Line 24:

| website = {{URL|https://www.cisco.com/c/en/us/products/security/vpn-endpoint-security-clients/index.html}}

}}

'''Cisco Systems VPN Client''' is a software application for connecting to [[virtual private network]]s based on [[Internet_Key_ExchangeInternet Key Exchange#IKEv1_phasesIKEv1 phases|Internet Key Exchange version 1]].

On July 29, 2011, Cisco announced the end of life of the product. No further product updates were released after July 30, 2012, and support ceased inon July 29, 2014.<ref>{{Cite web|url=https://www.cisco.com/c/en/us/products/collateral/security/vpn-client/end_of_life_c51-680819.html|title = Cisco Secure Products and Solutions}}</ref> The Support page with documentation links was taken down on July 30, 2016, replaced with an Obsolete Status Notification.<ref>[{{Cite web|url=https://www.cisco.com/c/en/us/support/web/obsolete/security-vpn-client.html]|title = Cisco-VPN-client}}</ref>

It was succeeded by [[Cisco AnyConnect Secure Mobility Client]].

==Availability and compatibility ==

Line 40 ⟶ 42:

The client uses [[profile configuration file]]s (.pcf) that store VPN passwords either [[cryptographic hash function|hashed]] with [[type 7]], or stored as [[plaintext]]. A vulnerability has been identified,<ref name=cSec>{{cite web|url=https://www.cisco.com/en/US/tech/tk583/tk372/technologies_security_notice09186a0080215981.html|title=Cisco Security Notice: Cisco IPsec VPN Implementation Group Password Usage Vulnerability}}</ref> and those passwords can easily be decoded using software or online services.<ref>{{cite web|url=http://www.unix-ag.uni-kl.de/~massar/bin/cisco-decode|title=Cisco Systems VPN Client Group Password Decoder}}</ref> To work around these issues, network administrators are advised to use the Mutual Group Authentication feature, or use unique passwords (that aren't related to other important network passwords).<ref name=cSec/>

==See also==

* [[Cisco ASA]], the product line that replaced Cisco VPN Concentrator on the server side

==References==