Cisco Systems VPN Client: Difference between revisions

Revision as of 00:17, 4 September 2017

Revision as of 03:12, 19 January 2018

Line 24:

| website = {{URL|https://www.cisco.com/c/en/us/products/security/vpn-endpoint-security-clients/index.html}}

}}

'''Cisco Systems VPN Client''' is a software application for connecting to a [[virtual private network]].s Thebased clienton makes[[Internet_Key_Exchange#IKEv1_phases|Internet remoteKey resourcesExchange ofversion another network available in a secure way as if the user were connected directly to that "private" network1]].

On July 29, 2011, Cisco announced the end of life of the product. No further product updates were released after July 30, 2012, and support ceased in July 29, 2014.<ref>https://www.cisco.com/c/en/us/products/collateral/security/vpn-client/end_of_life_c51-680819.html</ref> The Support page with documentation links was taken down on July 30, 2016, replaced with an Obsolete Status Notification.<ref>[https://www.cisco.com/c/en/us/support/web/obsolete/security-vpn-client.html]</ref>. A suggested migration option for customers is the [[Cisco AnyConnect Secure Mobility Client]].<ref>[https://www.cisco.com/c/en/us/products/collateral/security/vpn-client/end_of_life_c51-680819.html End-of-Sale and End-of-Life Announcement for the Cisco VPN Client]</ref>

==Availability and compatibility ==

==Installation==

The client is normally distributed with an executable installer and profile file(s), which contain all the necessary information to easily connect to a network.

A .pcf (or [[profile configuration file]]) is used to configure the VPN client for connecting to the remote server.

==Availability==

The software is not free but is often installed on university and business computers in accordance with a site-license. As with most corporate licenses, administrators are allowed to freely distribute the software to users within their network.

The open-source [https://www.unix-ag.uni-kl.de/~massar/vpnc/ vpnc client] can connect to most VPNs supported by the official client.

==Compatibility==

VPN Client 4.9.01.0230 beta added support for Mac OS X 10.6.<ref>[https://www.cisco.com/web/software/282364316/35919/4.9.1.0230-beta-rel-notes.txt Release Notes for VPN Client, Release 4.9.01.0230 Beta for Mac OS X]</ref> Stable version 4.9.01.0180 appears to lack that support; 4.9.00.0050 explicitly did ''not'' support versions of Mac OS X later than 10.5.<ref>[https://www.cisco.com/en/US/docs/security/vpn_client/cisco_vpn_client/vpn_client49/release/notes/49client.pdf Release Notes for VPN Client, Release 4.9.00.0050 for Mac OS X, Revised: May 21, 2010, OL-11179-04]</ref>

Line 43 ⟶ 38:

==Security==

The client uses [[profile configuration file]]s (.pcf) that store VPN passwords either [[cryptographic hash function|hashed]] with [[type 7]], or stored as [[plaintext]]. A vulnerability has been identified,<ref name=cSec>{{cite web|url=https://www.cisco.com/en/US/tech/tk583/tk372/technologies_security_notice09186a0080215981.html|title=Cisco Security Notice: Cisco IPsec VPN Implementation Group Password Usage Vulnerability}}</ref> and those passwords can easily be decoded using software or online services.<ref>{{cite web|url=http://www.unix-ag.uni-kl.de/~massar/bin/cisco-decode|title=Cisco Systems VPN Client Group Password Decoder}}</ref> To work around these issues, network administrators are advised to use the Mutual Group Authentication feature, or use unique passwords (that aren't related to other important network passwords).<ref name=cSec/>